diff -ru --new-file openssh-3.7.1p2/CREDITS openssh-3.8p1/CREDITS --- openssh-3.7.1p2/CREDITS 2003-09-07 12:34:54.000000000 +1000 +++ openssh-3.8p1/CREDITS 2004-01-30 15:00:50.000000000 +1100 @@ -1,6 +1,6 @@ Tatu Ylonen - Creator of SSH -Aaron Campbell, Bob Beck, Markus Friedl, Niels Provos, +Aaron Campbell, Bob Beck, Markus Friedl, Niels Provos, Theo de Raadt, and Dug Song - Creators of OpenSSH Alain St-Denis - Irix fix @@ -88,11 +88,12 @@ Tor-Ake Fransson - AIX support Tudor Bosman - MD5 password support Udo Schweigert - ReliantUNIX support +Wendy Palm - Cray support. Zack Weinberg - GNOME askpass enhancement Apologies to anyone I have missed. Damien Miller -$Id: CREDITS,v 1.74 2003/09/07 02:34:54 dtucker Exp $ +$Id: CREDITS,v 1.77 2004/01/30 04:00:50 dtucker Exp $ diff -ru --new-file openssh-3.7.1p2/ChangeLog openssh-3.8p1/ChangeLog --- openssh-3.7.1p2/ChangeLog 2003-09-23 19:33:17.000000000 +1000 +++ openssh-3.8p1/ChangeLog 2004-02-24 17:13:28.000000000 +1100 @@ -1,30 +1,714 @@ -20030923 +20040224 - (dtucker) OpenBSD CVS Sync - - markus@cvs.openbsd.org 2003/09/18 07:52:54 + - markus@cvs.openbsd.org 2004/02/19 21:15:04 + [sftp-server.c] + switch to new license.template + - markus@cvs.openbsd.org 2004/02/23 12:02:33 + [sshd.c] + backout revision 1.279; set listen socket to non-block; ok henning. + - markus@cvs.openbsd.org 2004/02/23 15:12:46 + [bufaux.c] + encode 0 correctly in buffer_put_bignum2; noted by Mikulas Patocka + and drop support for negative BNs; ok otto@ + - markus@cvs.openbsd.org 2004/02/23 15:16:46 + [version.h] + enter 3.8 + - (dtucker) [configure.ac gss-serv-krb5.c ssh-gss.h] Define GSSAPI when found + with krb5-config, hunt down gssapi.h and friends. Based partially on patch + from deengert at anl.gov. ok djm@ + - (djm) [groupaccess.c uidswap.c] Bug #787: Size group arrays at runtime + using sysconf() if available Based on patches from + holger AT van-lengerich.de and openssh_bugzilla AT hockin.org + - (dtucker) [uidswap.c] Minor KNF. ok djm@ + - (tim) [openbsd-compat/getrrsetbyname.c] Make gcc 2.7.2.3 happy. ok djm@ + - (djm) Crank RPM spec versions + - (dtucker) [README] Add pointer to release notes. ok djm@ + - (dtucker) {README.platform] Add platform-specific notes. + - (tim) [configure.ac] SCO3 needs -lcrypt_i for -lprot + - (djm) Release 3.8p1 + +20040223 + - (dtucker) [session.c] Bug #789: Only make setcred call for !privsep in the + non-interactive path. ok djm@ + +20040222 + - (dtucker) [auth-shadow.c auth.c auth.h] Move shadow account expiry test + to auth-shadow.c, no functional change. ok djm@ + - (dtucker) [auth-shadow.c auth.h] Provide warnings of impending account or + password expiry. ok djm@ + - (dtucker) [auth-passwd.c] Only check password expiry once. Prevents + multiple warnings if a wrong password is entered. + - (dtucker) [configure.ac] Apply krb5-config --libs fix to non-gssapi path + too. + +20040220 + - (djm) [openbsd-compat/setproctitle.c] fix comments; from grange@ + +20040218 + - (dtucker) [configure.ac] Handle case where krb5-config --libs returns a + path with a "-" in it. From Sergio.Gelato at astro.su.se. + - (djm) OpenBSD CVS Sync + - djm@cvs.openbsd.org 2004/02/17 07:17:29 + [sftp-glob.c sftp.c] + Remove useless headers; ok deraadt@ + - djm@cvs.openbsd.org 2004/02/17 11:03:08 + [sftp.c] + sftp.c and sftp-int.c, together at last; ok markus@ + - jmc@cvs.openbsd.org 2004/02/17 19:35:21 + [sshd_config.5] + remove cruft left over from RhostsAuthentication removal; + ok markus@ + - (djm) [log.c] Correct use of HAVE_OPENLOG_R + - (djm) [log.c] Tighten openlog_r tests + +20040217 + - (djm) Simplify the license on code I have written. No code changes. + - (djm) OpenBSD CVS Sync + - djm@cvs.openbsd.org 2004/02/17 05:39:51 + [sftp-client.c sftp-client.h sftp-glob.c sftp-glob.h sftp-int.c] + [sftp-int.h sftp.c] + switch to license.template for code written by me (belated, I know...) + - (djm) Bug #698: Specify FILE: for KRB5CCNAME; patch from + stadal@suse.cz and simon@sxw.org.uk + - (dtucker) [auth-pam.c] Tidy up PAM debugging. ok djm@ + - (dtucker) [auth-pam.c] Store output from pam_session and pam_setcred for + display after login. Should fix problems like pam_motd not displaying + anything, noticed by cjwatson at debian.org. ok djm@ + +20040212 + - (tim) [Makefile.in regress/sftp-badcmds.sh regress/test-exec.sh] + Portablity fixes. Data sftp transfers needs to be world readable. Some + older shells hang on while loops when doing sh -n some_script. OK dtucker@ + - (tim) [configure.ac] Make sure -lcrypto is before -lsocket for sco3. + ok mouring@ + +20040211 + - (dtucker) [auth-passwd.c auth-shadow.c] Only enable shadow expiry check + if HAS_SHADOW_EXPIRY is set. + - (tim) [configure.ac] Fix comment to match code changes in ver 1.117 + +20040210 + - (dtucker) [auth-passwd.c auth.h openbsd-compat/port-aix.c + openbsd-compat/port-aix.h] Bug #14: Use do_pwchange to support AIX's + native password expiry. + - (dtucker) [LICENCE Makefile.in auth-passwd.c auth-shadow.c auth.c auth.h + defines.h] Bug #14: Use do_pwchange to support password expiry and force + change for platforms using /etc/shadow. ok djm@ + - (dtucker) [openbsd-compat/fake-rfc2553.h] Bug #563: Prepend ssh_ to compat + functions to avoid conflicts with Heimdal's libroken. ok djm@ + - (dtucker) [auth-pam.c auth-pam.h session.c] Bug #14: Use do_pwchange to + change expired PAM passwords for SSHv1 connections without privsep. + pam_chauthtok is still used when privsep is disabled. ok djm@ + - (dtucker) [openbsd-compat/port-aix.c openbsd-compat/port-aix.h] Move + include from port-aix.h to port-aix.c and remove unnecessary function + definition. Fixes build errors on AIX. + - (dtucker) [configure.ac loginrec.c] Bug #464: Use updwtmpx on platforms + that support it. from & ok mouring@ + - (dtucker) [configure.ac] Bug #345: Do not disable utmp on HP-UX 10.x. + ok djm@ + +20040207 + - (dtucker) OpenBSD CVS Sync + - dtucker@cvs.openbsd.org 2004/02/06 23:41:13 + [cipher-ctr.c] + Use EVP_CIPHER_CTX_key_length for key length. ok markus@ + (This will fix builds with OpenSSL 0.9.5) + - (dtucker) [cipher.c] enable AES counter modes with OpenSSL 0.9.5. + ok djm@, markus@ + +20040206 + - (dtucker) [acss.c acss.h] Fix $Id tags. + - (dtucker) [cipher-acss.c cipher.c] Enable acss only if building with + OpenSSL >= 0.9.7. ok djm@ + - (dtucker) [session.c] Bug #789: Do not call do_pam_setcred as a non-root + user, since some modules might fail due to lack of privilege. ok djm@ + - (dtucker) [configure.ac] Bug #748: Always define BROKEN_GETADDRINFO + for HP-UX 11.11. If there are known-good configs where this is not + required, please report them. ok djm@ + - (dtucker) [sshd.c] Bug #757: Clear child's environment to prevent + accidentally inheriting from root's environment. ok djm@ + - (dtucker) [openbsd-compat/port-aix.c openbsd-compat/port-aix.h] Bug #796: + Restore previous authdb setting after auth calls. Fixes problems with + setpcred failing on accounts that use AFS or NIS password registries. + - (dtucker) [configure.ac includes.h] Include if present, + required on Solaris 2.5.1 for queue_t, which is used by . + - (dtucker) OpenBSD CVS Sync + - markus@cvs.openbsd.org 2004/01/30 09:48:57 + [auth-passwd.c auth.h pathnames.h session.c] + support for password change; ok dtucker@ + (set password-dead=1w in login.conf to use this). + In -Portable, this is currently only platforms using bsdauth. + - dtucker@cvs.openbsd.org 2004/02/05 05:37:17 + [monitor.c sshd.c] + Pass SIGALRM through to privsep child if LoginGraceTime expires. ok markus@ + - markus@cvs.openbsd.org 2004/02/05 15:33:33 + [progressmeter.c] + fix ETA for > 4GB; bugzilla #791; ok henning@ deraadt@ + +20040129 + - (dtucker) OpenBSD CVS Sync regress/ + - dtucker@cvs.openbsd.org 2003/10/11 11:49:49 + [Makefile banner.sh] + Test missing banner file, suppression of banner with ssh -q, check return + code from ssh. ok markus@ + - jmc@cvs.openbsd.org 2003/11/07 10:16:44 + [ssh-com.sh] + adress -> address, and a few more; all from Jonathon Gray; + - djm@cvs.openbsd.org 2004/01/13 09:49:06 + [sftp-batch.sh] + - (dtucker) [configure.ac] Add --without-zlib-version-check. Feedback from + tim@, ok several + - (dtucker) [configure.ac openbsd-compat/bsd-cray.c openbsd-compat/bsd-cray.h] + Bug #775: Cray fixes from wendy at cray.com + +20040128 + - (dtucker) [regress/README.regress] Add tcpwrappers issue, noted by tim@ + - (dtucker) [moduli] Import new moduli file from OpenBSD. + +20040127 + - (djm) OpenBSD CVS Sync + - hshoexer@cvs.openbsd.org 2004/01/23 17:06:03 + [cipher.c] + enable acss for ssh + ok deraadt@ markus@ + - mouring@cvs.openbsd.org 2004/01/23 17:57:48 + [sftp-int.c] + Fix issue pointed out with ls not handling large directories + with embeded paths correctly. OK damien@ + - hshoexer@cvs.openbsd.org 2004/01/23 19:26:33 + [cipher.c] + rename acss@opebsd.org to acss@openssh.org + ok deraadt@ + - djm@cvs.openbsd.org 2004/01/25 03:49:09 [sshconnect.c] - missing {}; bug #656; jclonguet at free.fr - - markus@cvs.openbsd.org 2003/09/18 07:54:48 - [buffer.c] - protect against double free; #660; zardoz at users.sf.net - - markus@cvs.openbsd.org 2003/09/18 08:49:45 - [deattack.c misc.c session.c ssh-agent.c] - more buffer allocation fixes; from Solar Designer; CAN-2003-0682; - ok millert@ - - markus@cvs.openbsd.org 2003/09/19 09:02:02 - [packet.c] - buffer_dump only if PACKET_DEBUG is defined; Jedi/Sector One; pr 3471 - - (djm) Fix SSH1 challenge kludge - - (djm) Bug #671: Fix builds on OpenBSD - - (djm) Bug #676: Fix PAM stack corruption - - (djm) Fix bad free() in PAM code - - (djm) Don't call pam_end before pam_init - - (djm) Enable build with old OpenSSL again - - (djm) Trim deprecated options from INSTALL. Mention UsePAM - - (djm) Fix quote handling in sftp; Patch from admorten AT umich.edu - - (djm) Crank version.h and spec version numbers - - (djm) Release 3.7.1p2 + reset nonblocking flag after ConnectTimeout > 0 connect; (bugzilla #785) + from jclonguet AT free.fr; ok millert@ + - djm@cvs.openbsd.org 2004/01/27 10:08:10 + [sftp.c] + reorder parsing so user:skey@host:file works (bugzilla #777) + patch from admorten AT umich.edu; ok markus@ + - (djm) [acss.c acss.h cipher-acss.c] Portable support for ACSS + if libcrypto lacks it + +20040126 + - (tim) Typo in regress/README.regress + - (tim) [regress/test-exec.sh] RhostsAuthentication is deprecated. + - (tim) [defines.h] Add defines for HFIXEDSZ and T_SIG + - (tim) [configure.ac includes.h] add for grantpt() and friends. + - (tim) [defines.h openbsd-compat/getrrsetbyname.h] Move defines for HFIXEDSZ + and T_SIG to getrrsetbyname.h + +20040124 + - (djm) Typo in openbsd-compat/bsd-openpty.c; from wendyp AT cray.com + +20040123 + - (djm) Do pam_session processing for systems with HAVE_LOGIN_CAP; from + ralf.hack AT pipex.net; ok dtucker@ + - (djm) Bug #776: Update contrib/redhat/openssh.spec to dynamically detect + Kerberos location (and thus work with Fedora Core 1); + from jason AT devrandom.org + - (dtucker) [configure.ac] Bug #788: Test for zlib.h presence and for + zlib >= 1.1.4. Partly from jbasney at ncsa.uiuc.edu. ok djm@ + - (dtucker) [contrib/cygwin/README] Document new ssh-host-config options. + Patch from vinschen at redhat.com. + - (dtucker) [acconfig.h configure.ac includes.h servconf.c session.c] + Change AFS symbol to USE_AFS to prevent namespace collisions, do not + include kafs.h unless necessary. From deengert at anl.gov. + - (tim) [configure.ac] Remove hard coded -L/usr/local/lib and + -I/usr/local/include. Users can do LDFLAGS="-L/usr/local/lib" \ + CPPFLAGS="-I/usr/local/include" ./configure if needed. + +20040122 + - (dtucker) [configure.ac] Use krb5-config where available for Kerberos/ + GSSAPI detection, libs and includes. ok djm@ + - (dtucker) [session.c] Enable AFS support in conjunction with KRB5 not + just HEIMDAL. + - (tim) [contrib/solaris/buildpkg.sh] Allow for the possibility of + /usr/local being a symbolic link. Fixes problem reported by Henry Grebler. + +20040121 + - (djm) OpenBSD CVS Sync + - djm@cvs.openbsd.org 2004/01/13 09:25:05 + [sftp-int.c sftp.1 sftp.c] + Tidy sftp batchmode handling, eliminate junk to stderr (bugzilla #754) and + enable use of "-b -" to accept batchfile from stdin; ok markus@ + - jmc@cvs.openbsd.org 2004/01/13 12:17:33 + [sftp.1] + remove unnecessary Ic's; + kill whitespace at EOL; + ok djm@ + - markus@cvs.openbsd.org 2004/01/13 19:23:15 + [compress.c session.c] + -Wall; ok henning + - markus@cvs.openbsd.org 2004/01/13 19:45:15 + [compress.c] + cast for portability; millert@ + - markus@cvs.openbsd.org 2004/01/19 09:24:21 + [channels.c] + fake consumption for half closed channels since the peer is waiting for + window adjust messages; bugzilla #790 Matthew Dillon; test + ok dtucker@ + reproduce with sh -c 'ulimit -f 10; ssh host -n od /bsd | cat > foo' + - markus@cvs.openbsd.org 2004/01/19 21:25:15 + [auth2-hostbased.c auth2-pubkey.c serverloop.c ssh-keysign.c sshconnect2.c] + fix mem leaks; some fixes from Pete Flugstad; tested dtucker@ + - djm@cvs.openbsd.org 2004/01/21 03:07:59 + [sftp.c] + initialise infile in main, rather than statically - from portable + - deraadt@cvs.openbsd.org 2004/01/11 21:55:06 + [sshpty.c] + for pty opening, only use the openpty() path. the other stuff only needs + to be in openssh-p; markus ok + - (djm) [openbsd-compat/bsd-openpty.c] Rework old sshpty.c code into an + openpty() replacement + +20040114 + - (dtucker) [auth-pam.c] Have monitor die if PAM authentication thread exits + unexpectedly. with & ok djm@ + - (dtucker) [auth-pam.c] Reset signal handler in pthread_cancel too, add + test for case where cleanup has already run. + - (dtucker) [auth-pam.c] Add minor debugging. + +20040113 + - (dtucker) [auth-pam.c] Relocate struct pam_ctxt and prototypes. No + functional changes. + +20040108 + - (dtucker) [auth-pam.c defines.h] Bug #783: move __unused to defines.h and + only define if not already. From des at freebsd.org. + - (dtucker) [configure.ac] Remove extra (typo) comma. + +20040105 + - (dtucker) [contrib/ssh-copy-id] Bug #781: exit if ssh fails. Patch from + cjwatson at debian.org. + - (dtucker) [acconfig.h configure.ac includes.h servconf.c session.c] + Only enable KerberosGetAFSToken if Heimdal's libkafs is found. with jakob@ + +20040102 + - (djm) OSX/Darwin needs BIND_8_COMPAT to build getrrsetbyname. Report from + jakob@ + - (djm) Remove useless DNS support configure summary message. from jakob@ + - (djm) OSX/Darwin put the PAM headers in a different place, detect this. + Report from jakob@ -20030922 +20031231 + - (dtucker) OpenBSD CVS Sync + - djm@cvs.openbsd.org 2003/12/22 09:16:58 + [moduli.c ssh-keygen.1 ssh-keygen.c] + tidy up moduli generation debugging, add -v (verbose/debug) option to + ssh-keygen; ok markus@ + - markus@cvs.openbsd.org 2003/12/22 20:29:55 + [cipher-3des1.c] + EVP_CIPHER_CTX_cleanup() for the des contexts; pruiksma@freesurf.fr + - jakob@cvs.openbsd.org 2003/12/23 16:12:10 + [servconf.c servconf.h session.c sshd_config] + implement KerberosGetAFSToken server option. ok markus@, beck@ + - millert@cvs.openbsd.org 2003/12/29 16:39:50 + [sshd_config] + KeepAlive has been obsoleted, use TCPKeepAlive instead; markus@ OK + - dtucker@cvs.openbsd.org 2003/12/31 00:24:50 + [auth2-passwd.c] + Ignore password change request during password auth (which we currently + don't support) and discard proposed new password. corrections/ok markus@ + - (dtucker) [configure.ac] Only test setresuid and setresgid if they exist. + +20031219 + - (dtucker) [defines.h] Bug #458: Define SIZE_T_MAX as UINT_MAX if we + typedef size_t ourselves. + +20031218 + - (dtucker) [configure.ac] Don't use setre[ug]id on DG-UX, from Tom Orban. + - (dtucker) [auth-pam.c] Do PAM chauthtok during SSH2 keyboard-interactive + authentication. Partially fixes bug #423. Feedback & ok djm@ + +20031217 + - (djm) OpenBSD CVS Sync + - markus@cvs.openbsd.org 2003/12/09 15:28:43 + [serverloop.c] + make ClientKeepAlive work for ssh -N, too (no login shell requested). + 1) send a bogus channel request if we find a channel + 2) send a bogus global request if we don't have a channel + ok + test beck@ + - markus@cvs.openbsd.org 2003/12/09 17:29:04 + [sshd.c] + fix -o and HUP; ok henning@ + - markus@cvs.openbsd.org 2003/12/09 17:30:05 + [ssh.c] + don't modify argv for ssh -o; similar to sshd.c 1.283 + - markus@cvs.openbsd.org 2003/12/09 21:53:37 + [readconf.c readconf.h scp.1 servconf.c servconf.h sftp.1 ssh.1] + [ssh_config.5 sshconnect.c sshd.c sshd_config.5] + rename keepalive to tcpkeepalive; the old name causes too much + confusion; ok djm, dtucker; with help from jmc@ + - dtucker@cvs.openbsd.org 2003/12/09 23:45:32 + [clientloop.c] + Clear exit code when ssh -N is terminated with a SIGTERM. ok markus@ + - markus@cvs.openbsd.org 2003/12/14 12:37:21 + [ssh_config.5] + we don't support GSS KEX; from Simon Wilkinson + - markus@cvs.openbsd.org 2003/12/16 15:49:51 + [clientloop.c clientloop.h readconf.c readconf.h scp.1 sftp.1 ssh.1] + [ssh.c ssh_config.5] + application layer keep alive (ServerAliveInterval ServerAliveCountMax) + for ssh(1), similar to the sshd(8) option; ok beck@; with help from + jmc and dtucker@ + - markus@cvs.openbsd.org 2003/12/16 15:51:54 + [dh.c] + use <= instead of < in dh_estimate; ok provos/hshoexer; + do not return < DH_GRP_MIN + - (dtucker) [acconfig.h configure.ac uidswap.c] Bug #645: Check for + setres[ug]id() present but not implemented (eg some Linux/glibc + combinations). + - (bal) [openbsd-compat/bsd-misc.c] unset 'signal' defined if we are + using a real 'signal()' (Noticed by a NeXT Compile) + +20031209 + - (dtucker) OpenBSD CVS Sync + - matthieu@cvs.openbsd.org 2003/11/25 23:10:08 + [ssh-add.1] + ssh-add doesn't need to be a descendant of ssh-agent. Ok markus@, jmc@. + - djm@cvs.openbsd.org 2003/11/26 21:44:29 + [cipher-aes.c] + fix #ifdef before #define; ok markus@ + (RCS ID sync only, Portable already had this) + - markus@cvs.openbsd.org 2003/12/02 12:15:10 + [progressmeter.c] + improvments from andreas@: + * saner speed estimate for transfers that takes less than a second by + rounding the time to 1 second. + * when the transfer is finished calculate the actual total speed + rather than the current speed which is given during the transfer + - markus@cvs.openbsd.org 2003/12/02 17:01:15 + [channels.c session.c ssh-agent.c ssh.h sshd.c] + use SSH_LISTEN_BACKLOG (=128) in listen(2). + - djm@cvs.openbsd.org 2003/12/07 06:34:18 + [moduli.c] + remove unused debugging #define templates + - markus@cvs.openbsd.org 2003/12/08 11:00:47 + [kexgexc.c] + print requested group size in debug; ok djm + - dtucker@cvs.openbsd.org 2003/12/09 13:52:55 + [moduli.c] + Prevent ssh-keygen -T from outputting moduli with a generator of 0, since + they can't be used for Diffie-Hellman. Assistance and ok djm@ + - (dtucker) [ssh-keyscan.c] Sync RCSIDs, missed in SSH_SSFDMAX change below. + +20031208 + - (tim) [configure.ac] Bug 770. Fix --without-rpath. + +20031123 + - (djm) [canohost.c] Move IPv4inV6 mapped address normalisation to its own + function and call it unconditionally + - (djm) OpenBSD CVS Sync + - djm@cvs.openbsd.org 2003/11/23 23:17:34 + [ssh-keyscan.c] + from portable - use sysconf to detect fd limit; ok markus@ + (tidy diff by adding SSH_SSFDMAX macro to defines.h) + - djm@cvs.openbsd.org 2003/11/23 23:18:45 + [ssh-keygen.c] + consistency PATH_MAX -> MAXPATHLEN; ok markus@ + (RCS ID sync only) + - djm@cvs.openbsd.org 2003/11/23 23:21:21 + [scp.c] + from portable: rename clashing variable limit-> limit_rate; ok markus@ + (RCS ID sync only) + - dtucker@cvs.openbsd.org 2003/11/24 00:16:35 + [ssh.1 ssh.c] + Make ssh -k mean GSSAPIDelegateCredentials=no. Suggestion & ok markus@ + - (djm) Annotate OpenBSD-derived files in openbsd-compat/ with original + source file path (in OpenBSD tree). + +20031122 + - (dtucker) [channels.c] Make AIX write limit code clearer. Suggested by djm@ + - (dtucker) [auth-passwd.c openbsd-compat/port-aix.c openbsd-compat/port-aix.h] + Move AIX specific password authentication code to port-aix.c, call + authenticate() until reenter flag is clear. + - (dtucker) [auth-sia.c configure.ac] Tru64 update from cmadams at hiwaay.net. + Use permanently_set_uid for SIA, only define DISABLE_FD_PASSING when SIA + is enabled, rely on SIA to check for locked accounts if enabled. ok djm@ + - (djm) [scp.c] Rename limitbw -> limit_rate to match upstreamed patch + - (djm) [sftp-int.c] Remove duplicated code from bogus sync + - (djm) [packet.c] Shuffle #ifdef to reduce conditionally compiled code + +20031121 + - (djm) OpenBSD CVS Sync + - markus@cvs.openbsd.org 2003/11/20 11:39:28 + [progressmeter.c] + fix rounding errors; from andreas@ + - djm@cvs.openbsd.org 2003/11/21 11:57:03 + [everything] + unexpand and delete whitespace at EOL; ok markus@ + (done locally and RCS IDs synced) + +20031118 + - (djm) Fix early exit for root auth success when UsePAM=yes and + PermitRootLogin=no + - (dtucker) [auth-pam.c] Convert chauthtok_conv into a generic tty_conv, + and use it for do_pam_session. Fixes problems like pam_motd not + displaying anything. ok djm@ + - (dtucker) [auth-pam.c] Only use pam_putenv if our platform has it. ok djm@ + - (djm) OpenBSD CVS Sync + - dtucker@cvs.openbsd.org 2003/11/18 00:40:05 + [serverloop.c] + Correct check for authctxt->valid. ok djm@ + - djm@cvs.openbsd.org 2003/11/18 10:53:07 + [monitor.c] + unbreak fake authloop for non-existent users (my screwup). Spotted and + tested by dtucker@; ok markus@ + +20031117 + - (djm) OpenBSD CVS Sync + - djm@cvs.openbsd.org 2003/11/03 09:03:37 + [auth-chall.c] + make this a little more idiot-proof; ok markus@ + (includes portable-specific changes) + - jakob@cvs.openbsd.org 2003/11/03 09:09:41 + [sshconnect.c] + move changed key warning into warn_changed_key(). ok markus@ + - jakob@cvs.openbsd.org 2003/11/03 09:37:32 + [sshconnect.c] + do not free static type pointer in warn_changed_key() + - djm@cvs.openbsd.org 2003/11/04 08:54:09 + [auth1.c auth2.c auth2-pubkey.c auth.h auth-krb5.c auth-passwd.c] + [auth-rhosts.c auth-rh-rsa.c auth-rsa.c monitor.c serverloop.c] + [session.c] + standardise arguments to auth methods - they should all take authctxt. + check authctxt->valid rather then pw != NULL; ok markus@ + - jakob@cvs.openbsd.org 2003/11/08 16:02:40 + [auth1.c] + remove unused variable (pw). ok djm@ + (id sync only - still used in portable) + - jmc@cvs.openbsd.org 2003/11/08 19:17:29 + [sftp-int.c] + typos from Jonathon Gray; + - jakob@cvs.openbsd.org 2003/11/10 16:23:41 + [bufaux.c bufaux.h cipher.c cipher.h hostfile.c hostfile.h key.c] + [key.h sftp-common.c sftp-common.h sftp-server.c sshconnect.c sshd.c] + [ssh-dss.c ssh-rsa.c uuencode.c uuencode.h] + constify. ok markus@ & djm@ + - dtucker@cvs.openbsd.org 2003/11/12 10:12:15 + [scp.c] + When called with -q, pass -q to ssh; suppresses SSH2 banner. ok markus@ + - jakob@cvs.openbsd.org 2003/11/12 16:39:58 + [dns.c dns.h readconf.c ssh_config.5 sshconnect.c] + update SSHFP validation. ok markus@ + - jmc@cvs.openbsd.org 2003/11/12 20:14:51 + [ssh_config.5] + make verb agree with subject, and kill some whitespace; + - markus@cvs.openbsd.org 2003/11/14 13:19:09 + [sshconnect2.c] + cleanup and minor fixes for the client code; from Simon Wilkinson + - djm@cvs.openbsd.org 2003/11/17 09:45:39 + [msg.c msg.h sshconnect2.c ssh-keysign.c] + return error on msg send/receive failure (rather than fatal); ok markus@ + - markus@cvs.openbsd.org 2003/11/17 11:06:07 + [auth2-gss.c gss-genr.c gss-serv.c monitor.c monitor.h monitor_wrap.c] + [monitor_wrap.h sshconnect2.c ssh-gss.h] + replace "gssapi" with "gssapi-with-mic"; from Simon Wilkinson; + test + ok jakob. + - (djm) Bug #632: Don't call pam_end indirectly from within kbd-int + conversation function + - (djm) Export environment variables from authentication subprocess to + parent. Part of Bug #717 + +20031115 + - (dtucker) [regress/agent-ptrace.sh] Test for GDB output from Solaris and + HP-UX, skip test on AIX. + +20031113 + - (dtucker) [auth-pam.c] Append newlines to lines output by the + pam_chauthtok_conv(). + - (dtucker) [README ssh-host-config ssh-user-config Makefile] (All + contrib/cygwin). Major update from vinschen at redhat.com. + - Makefile provides a `cygwin-postinstall' target to run right after + `make install'. + - Better support for Windows 2003 Server. + - Try to get permissions as correct as possible. + - New command line options to allow full automated host configuration. + - Create configs from skeletons in /etc/defaults/etc. + - Use /bin/bash, allows reading user input with readline support. + - Remove really old configs from /usr/local. + - (dtucker) [auth-pam.c] Add newline to accumulated PAM_TEXT_INFO and + PAM_ERROR_MSG messages. + +20031106 + - (djm) Clarify UsePAM consequences a little more + +20031103 + - (dtucker) [contrib/cygwin/ssh-host-config] Ensure entries in /etc/services + are created correctly with CRLF line terminations. Patch from vinschen at + redhat.com. + - (dtucker) OpenBSD CVS Sync + - markus@cvs.openbsd.org 2003/10/15 09:48:45 + [monitor_wrap.c] + check pmonitor != NULL + - markus@cvs.openbsd.org 2003/10/21 09:50:06 + [auth2-gss.c] + make sure the doid is larger than 2 + - avsm@cvs.openbsd.org 2003/10/26 16:57:43 + [sshconnect2.c] + rename 'supported' static var in userauth_gssapi() to 'gss_supported' + to avoid shadowing the global version. markus@ ok + - markus@cvs.openbsd.org 2003/10/28 09:08:06 + [misc.c] + error->debug for getsockopt+TCP_NODELAY; several requests + - markus@cvs.openbsd.org 2003/11/02 11:01:03 + [auth2-gss.c compat.c compat.h sshconnect2.c] + remove support for SSH_BUG_GSSAPI_BER; simon@sxw.org.uk + - (dtucker) [regress/agent-ptrace.sh] Use numeric uid and gid. + +20031021 + - (dtucker) [INSTALL] Some system crypt() functions support MD5 passwords + directly. Noted by Darren.Moffat at sun.com. + - (dtucker) [regress/agent-ptrace.sh] Skip agent-test unless SUDO is set, + make agent setgid during test. + +20031017 + - (dtucker) [INSTALL] Note that --with-md5 is now required on platforms with + MD5 passwords even if PAM support is enabled. From steev at detritus.net. + +20031015 + - (dtucker) OpenBSD CVS Sync + - jmc@cvs.openbsd.org 2003/10/08 08:27:36 + [scp.1 scp.c sftp-server.8 sftp.1 sftp.c ssh.1 sshd.8] + scp and sftp: add options list and sort options. options list requested + by deraadt@ + sshd: use same format as ssh + ssh: remove wrong option from list + sftp-server: Subsystem is documented in ssh_config(5), not sshd(8) + ok deraadt@ markus@ + - markus@cvs.openbsd.org 2003/10/08 15:21:24 + [readconf.c ssh_config.5] + default GSS API to no in client, too; ok jakob, deraadt@ + - markus@cvs.openbsd.org 2003/10/11 08:24:08 + [readconf.c readconf.h ssh.1 ssh.c ssh_config.5] + remote x11 clients are now untrusted by default, uses xauth(8) to generate + untrusted cookies; ForwardX11Trusted=yes restores old behaviour. + ok deraadt; feedback and ok djm/fries + - markus@cvs.openbsd.org 2003/10/11 08:26:43 + [sshconnect2.c] + search keys in reverse order; fixes #684 + - markus@cvs.openbsd.org 2003/10/11 11:36:23 + [monitor_wrap.c] + return NULL for missing banner; ok djm@ + - jmc@cvs.openbsd.org 2003/10/12 13:12:13 + [ssh_config.5] + note that EnableSSHKeySign should be in the non-hostspecific section; + remove unnecessary .Pp; + ok markus@ + - markus@cvs.openbsd.org 2003/10/13 08:22:25 + [scp.1 sftp.1] + don't refer to options related to forwarding; ok jmc@ + - jakob@cvs.openbsd.org 2003/10/14 19:42:10 + [dns.c dns.h readconf.c ssh-keygen.c sshconnect.c] + include SSHFP lookup code (not enabled by default). ok markus@ + - jakob@cvs.openbsd.org 2003/10/14 19:43:23 + [README.dns] + update + - markus@cvs.openbsd.org 2003/10/14 19:54:39 + [session.c ssh-agent.c] + 10X for mkdtemp; djm@ + - (dtucker) [acconfig.h configure.ac dns.c openbsd-compat/getrrsetbyname.c + openbsd-compat/getrrsetbyname.h] DNS fingerprint support is now always + compiled in but disabled in config. + - (dtucker) [auth.c] Check for disabled password expiry on HP-UX Trusted Mode. + - (tim) [regress/banner.sh] portability fix. + +20031009 + - (dtucker) [sshd_config.5] UsePAM defaults to "no". ok djm@ + +20031008 + - (dtucker) OpenBSD CVS Sync + - dtucker@cvs.openbsd.org 2003/10/07 01:47:27 + [sshconnect2.c] + Don't use logit for banner, since it truncates to MSGBUFSIZ; bz #668 & + #707. ok markus@ + - djm@cvs.openbsd.org 2003/10/07 07:04:16 + [sftp-int.c] + sftp quoting fix from admorten AT umich.edu; ok markus@ + - deraadt@cvs.openbsd.org 2003/10/07 21:58:28 + [sshconnect2.c] + set ptr to NULL after free + - dtucker@cvs.openbsd.org 2003/10/07 01:52:13 + [regress/Makefile regress/banner.sh] + Test SSH2 banner. ok markus@ + - djm@cvs.openbsd.org 2003/10/07 07:04:52 + [regress/sftp-cmds.sh] + more sftp quoting regress tests; ok markus + +20031007 + - (djm) Delete autom4te.cache after autoreconf + - (dtucker) [auth-pam.c auth-pam.h session.c] Make PAM use the new static + cleanup functions. With & ok djm@ + - (dtucker) [contrib/redhat/openssh.spec] Bug #714: Now that UsePAM is a + run-time switch, always build --with-md5-passwords. + - (dtucker) [configure.ac openbsd-compat/Makefile.in openbsd-compat/strtoul.c] + Bug #670: add strtoul() to openbsd-compat for platforms lacking it. ok djm@ + - (dtucker) [configure.ac] Bug #715: Set BROKEN_SETREUID and BROKEN_SETREGID + on Reliant Unix. Patch from Robert.Dahlem at siemens.com. + - (dtucker) [configure.ac] Bug #710: Check for dlsym() in libdl on + Reliant Unix. Based on patch from Robert.Dahlem at siemens.com. + +20031003 + - (dtucker) OpenBSD CVS Sync + - markus@cvs.openbsd.org 2003/10/02 10:41:59 + [sshd.c] + print openssl version, too, several requests; ok henning/djm. + - markus@cvs.openbsd.org 2003/10/02 08:26:53 + [ssh-gss.h] + missing $OpenBSD:; dtucker + - (tim) [contrib/caldera/openssh.spec] Remove obsolete --with-ipv4-default + option. + +20031002 + - (dtucker) OpenBSD CVS Sync + - markus@cvs.openbsd.org 2003/09/23 20:17:11 + [Makefile.in auth1.c auth2.c auth.c auth.h auth-krb5.c canohost.c + cleanup.c clientloop.c fatal.c gss-serv.c log.c log.h monitor.c monitor.h + monitor_wrap.c monitor_wrap.h packet.c serverloop.c session.c session.h + ssh-agent.c sshd.c] + replace fatal_cleanup() and linked list of fatal callbacks with static + cleanup_exit() function. re-refine cleanup_exit() where appropriate, + allocate sshd's authctxt eary to allow simpler cleanup in sshd. + tested by many, ok deraadt@ + - markus@cvs.openbsd.org 2003/09/23 20:18:52 + [progressmeter.c] + don't print trailing \0; bug #709; Robert.Dahlem@siemens.com + ok millert/deraadt@ + - markus@cvs.openbsd.org 2003/09/23 20:41:11 + [channels.c channels.h clientloop.c] + move client only agent code to clientloop.c + - markus@cvs.openbsd.org 2003/09/26 08:19:29 + [sshd.c] + no need to set the listen sockets to non-block; ok deraadt@ + - jmc@cvs.openbsd.org 2003/09/29 11:40:51 + [ssh.1] + - add list of options to -o and .Xr ssh_config(5) + - some other cleanup + requested by deraadt@; + ok deraadt@ markus@ + - markus@cvs.openbsd.org 2003/09/29 20:19:57 + [servconf.c sshd_config] + GSSAPICleanupCreds -> GSSAPICleanupCredentials + - (dtucker) [configure.ac] Don't set DISABLE_SHADOW when configuring + --with-pam. ok djm@ + - (dtucker) [ssh-gss.h] Prototype change missed in sync. + - (dtucker) [session.c] Fix bus errors on some 64-bit Solaris configurations. + Based on patches by Matthias Koeppe and Thomas Baden. ok djm@ + +20030930 + - (bal) Fix issues in openbsd-compat/realpath.c + +20030925 + - (dtucker) [configure.ac openbsd-compat/xcrypt.c] Bug #633: Remove + DISABLE_SHADOW for HP-UX, use getspnam instead of getprpwnam. Patch from + michael_steffens at hp.com, ok djm@ + - (tim) [sshd_config] UsePAM defaults to no. + +20030924 + - (djm) Update version.h and spec files for HEAD + - (dtucker) [configure.ac] IRIX5 needs the same setre[ug]id defines as IRIX6. + +20030923 - (dtucker) [Makefile.in] Bug #644: Fix "make clean" for out-of-tree builds. Portability corrections from tim@. - (dtucker) [configure.ac] Bug #665: uid swapping issues on Mac OS X. @@ -55,30 +739,89 @@ Report by distler AT golem ph utexas edu. - (dtucker) [contrib/aix/pam.conf] Include example pam.conf for AIX from article by genty at austin.ibm.com, included with the author's permission. + - (dtucker) OpenBSD CVS Sync + - markus@cvs.openbsd.org 2003/09/18 07:52:54 + [sshconnect.c] + missing {}; bug #656; jclonguet at free.fr + - markus@cvs.openbsd.org 2003/09/18 07:54:48 + [buffer.c] + protect against double free; #660; zardoz at users.sf.net + - markus@cvs.openbsd.org 2003/09/18 07:56:05 + [authfile.c] + missing buffer_free(&encrypted); #662; zardoz at users.sf.net + - markus@cvs.openbsd.org 2003/09/18 08:49:45 + [deattack.c misc.c session.c ssh-agent.c] + more buffer allocation fixes; from Solar Designer; CAN-2003-0682; + ok millert@ + - miod@cvs.openbsd.org 2003/09/18 13:02:21 + [authfd.c bufaux.c dh.c mac.c ssh-keygen.c] + A few signedness fixes for harmless situations; markus@ ok + - markus@cvs.openbsd.org 2003/09/19 09:02:02 + [packet.c] + buffer_dump only if PACKET_DEBUG is defined; Jedi/Sector One; pr 3471 + - markus@cvs.openbsd.org 2003/09/19 09:03:00 + [buffer.c] + sign fix in buffer_dump; Jedi/Sector One; pr 3473 + - markus@cvs.openbsd.org 2003/09/19 11:29:40 + [ssh-agent.c] + provide a ssh-agent specific fatal() function; ok deraadt + - markus@cvs.openbsd.org 2003/09/19 11:30:39 + [ssh-keyscan.c] + avoid fatal_cleanup, just call exit(); ok deraadt + - markus@cvs.openbsd.org 2003/09/19 11:31:33 + [channels.c] + do not call channel_free_all on fatal; ok deraadt + - markus@cvs.openbsd.org 2003/09/19 11:33:09 + [packet.c sshd.c] + do not call packet_close on fatal; ok deraadt + - markus@cvs.openbsd.org 2003/09/19 17:40:20 + [scp.c] + error handling for remote-remote copy; #638; report Harald Koenig; + ok millert, fgs, henning, deraadt + - markus@cvs.openbsd.org 2003/09/19 17:43:35 + [clientloop.c sshtty.c sshtty.h] + remove fatal callbacks from client code; ok deraadt + - (bal) "extration" -> "extraction" in ssh-rand-helper.c; repoted by john + on #unixhelp@efnet - (tim) [configure.ac] add --disable-etc-default-login option. ok djm + - (djm) Sync with V_3_7 branch: + - (djm) Fix SSH1 challenge kludge + - (djm) Bug #671: Fix builds on OpenBSD + - (djm) Bug #676: Fix PAM stack corruption + - (djm) Fix bad free() in PAM code + - (djm) Don't call pam_end before pam_init + - (djm) Enable build with old OpenSSL again + - (djm) Trim deprecated options from INSTALL. Mention UsePAM + - (djm) Fix quote handling in sftp; Patch from admorten AT umich.edu 20030919 - (djm) Bug #683: Remove reference to --with-ipv4-default from INSTALL; djast AT cs.toronto.edu - - (djm) Bug #680: Remove missing inet_ntoa.h header reference + - (djm) Bug #661: Remove duplicate check for basename; from + bugzilla-openssh AT thewrittenword.com + - (djm) Bug #641: Allow RedHat RPM building without GTK-2; Patch from + jason AT devrandom.org - (djm) Bug #646: Fix location of x11-ssh-askpass; Jim - (dtucker) [openbsd-compat/port-aix.h] Bug #640: Don't include audit.h unless required. Reorder to reduce warnings. - (dtucker) [session.c] Bug #643: Fix size_t -> u_int and fix null deref when /etc/default/login doesn't exist or isn't readable. Fixes from jparsons-lists at saffron.net and georg.oppenberg at deu mci com. + - (dtucker) [acconfig.h] Updated basename test needs HAVE_BASENAME 20030918 - (djm) Bug #652: Fix empty password auth 20030917 + - (djm) Sync with V_3_7 branch - (djm) OpenBSD Sync - markus@cvs.openbsd.org 2003/09/16 21:02:40 [buffer.c channels.c version.h] more malloc/fatal fixes; ok millert/deraadt; ghudson at MIT.EDU - - (djm) Crank RPM spec versions - - (djm) Release 3.7.1p1 - + - (djm) Crank RPM spec file versions + - (tim) [openbsd-compat/inet_ntoa.c] 20030917 "Sync with V_3_7 branch" undid + 20030916 "Missed dead header in inet_ntoa.c" + 20030916 - (dtucker) [acconfig.h configure.ac defines.h session.c] Bug #252: Retrieve PATH (or SUPATH) and UMASK from /etc/default/login on platforms that have it @@ -88,10 +831,8 @@ - deraadt@cvs.openbsd.org 2003/09/16 03:03:47 [buffer.c] do not expand buffer before attempting to reallocate it; markus ok - - (djm) Crank spec versions - - (djm) Banish (safe) sprintf from auth-pam.c. Patch from bal - (tim) [configure.ac] Fix portability issues. - - (djm) Release 3.7p1 + - (bal) Missed dead header in inet_ntoa.c 20030914 - (dtucker) [Makefile regress/Makefile] Fix portability issues preventing @@ -1188,4 +1929,4 @@ - Fix sshd BindAddress and -b options for systems using fake-getaddrinfo. Report from murple@murple.net, diagnosis from dtucker@zip.com.au -$Id: ChangeLog,v 1.2994.2.34 2003/09/23 09:33:17 djm Exp $ +$Id: ChangeLog,v 1.3257 2004/02/24 06:13:28 djm Exp $ diff -ru --new-file openssh-3.7.1p2/INSTALL openssh-3.8p1/INSTALL --- openssh-3.7.1p2/INSTALL 2003-09-23 19:24:21.000000000 +1000 +++ openssh-3.8p1/INSTALL 2003-11-21 23:48:55.000000000 +1100 @@ -4,21 +4,21 @@ You will need working installations of Zlib and OpenSSL. Zlib 1.1.4 or greater: -http://www.gzip.org/zlib/ +http://www.gzip.org/zlib/ OpenSSL 0.9.6 or greater: http://www.openssl.org/ -(OpenSSL 0.9.5a is partially supported, but some ciphers (SSH protocol 1 +(OpenSSL 0.9.5a is partially supported, but some ciphers (SSH protocol 1 Blowfish) do not work correctly.) OpenSSH can utilise Pluggable Authentication Modules (PAM) if your system supports it. PAM is standard on Redhat and Debian Linux, Solaris and HP-UX 11. -NB. If you operating system supports /dev/random, you should configure -OpenSSL to use it. OpenSSH relies on OpenSSL's direct support of -/dev/random. If you don't you will have to rely on ssh-rand-helper, which +NB. If you operating system supports /dev/random, you should configure +OpenSSL to use it. OpenSSH relies on OpenSSL's direct support of +/dev/random. If you don't you will have to rely on ssh-rand-helper, which is inferior to a good kernel-based solution. PAM: @@ -37,7 +37,7 @@ PRNGD: -If your system lacks Kernel based random collection, the use of Lutz +If your system lacks Kernel based random collection, the use of Lutz Jaenicke's PRNGd is recommended. http://www.aet.tu-cottbus.de/personen/jaenicke/postfix_tls/prngd.html @@ -54,7 +54,7 @@ If you wish to use --with-skey then you will need the above library installed. No other current S/Key library is currently known to be -supported. +supported. 2. Building / Installation -------------------------- @@ -73,7 +73,7 @@ make make install -Will install OpenSSH in /opt/{bin,etc,lib,sbin}. You can also override +Will install OpenSSH in /opt/{bin,etc,lib,sbin}. You can also override specific paths, for example: ./configure --prefix=/opt --sysconfdir=/etc/ssh @@ -104,40 +104,42 @@ --with-pam enables PAM support. If PAM support is compiled in, it must also be enabled in sshd_config (refer to the UsePAM directive). ---with-prngd-socket=/some/file allows you to enable EGD or PRNGD -support and to specify a PRNGd socket. Use this if your Unix lacks -/dev/random and you don't want to use OpenSSH's builtin entropy +--with-prngd-socket=/some/file allows you to enable EGD or PRNGD +support and to specify a PRNGd socket. Use this if your Unix lacks +/dev/random and you don't want to use OpenSSH's builtin entropy collection support. ---with-prngd-port=portnum allows you to enable EGD or PRNGD support -and to specify a EGD localhost TCP port. Use this if your Unix lacks -/dev/random and you don't want to use OpenSSH's builtin entropy +--with-prngd-port=portnum allows you to enable EGD or PRNGD support +and to specify a EGD localhost TCP port. Use this if your Unix lacks +/dev/random and you don't want to use OpenSSH's builtin entropy collection support. ---with-lastlog=FILE will specify the location of the lastlog file. +--with-lastlog=FILE will specify the location of the lastlog file. ./configure searches a few locations for lastlog, but may not find it if lastlog is installed in a different place. --without-lastlog will disable lastlog support entirely. ---with-osfsia, --without-osfsia will enable or disable OSF1's Security +--with-osfsia, --without-osfsia will enable or disable OSF1's Security Integration Architecture. The default for OSF1 machines is enable. ---with-skey=PATH will enable S/Key one time password support. You will +--with-skey=PATH will enable S/Key one time password support. You will need the S/Key libraries and header files installed for this to work. --with-tcp-wrappers will enable TCP Wrappers (/etc/hosts.allow|deny) support. You will need libwrap.a and tcpd.h installed. --with-md5-passwords will enable the use of MD5 passwords. Enable this -if your operating system uses MD5 passwords without using PAM. +if your operating system uses MD5 passwords and the system crypt() does +not support them directly (see the crypt(3/3c) man page). If enabled, the +resulting binary will support both MD5 and traditional crypt passwords. ---with-utmpx enables utmpx support. utmpx support is automatic for +--with-utmpx enables utmpx support. utmpx support is automatic for some platforms. --without-shadow disables shadow password support. ---with-ipaddr-display forces the use of a numeric IP address in the +--with-ipaddr-display forces the use of a numeric IP address in the $DISPLAY environment variable. Some broken systems need this. --with-default-path=PATH allows you to specify a default $PATH for sessions @@ -167,35 +169,35 @@ 3. Configuration ---------------- -The runtime configuration files are installed by in ${prefix}/etc or +The runtime configuration files are installed by in ${prefix}/etc or whatever you specified as your --sysconfdir (/usr/local/etc by default). -The default configuration should be instantly usable, though you should +The default configuration should be instantly usable, though you should review it to ensure that it matches your security requirements. To generate a host key, run "make host-key". Alternately you can do so -manually using the following commands: +manually using the following commands: ssh-keygen -t rsa1 -f /etc/ssh/ssh_host_key -N "" ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key -N "" ssh-keygen -t dsa -f /etc/ssh/ssh_host_dsa_key -N "" Replacing /etc/ssh with the correct path to the configuration directory. -(${prefix}/etc or whatever you specified with --sysconfdir during +(${prefix}/etc or whatever you specified with --sysconfdir during configuration) If you have configured OpenSSH with EGD support, ensure that EGD is running and has collected some Entropy. -For more information on configuration, please refer to the manual pages +For more information on configuration, please refer to the manual pages for sshd, ssh and ssh-agent. 4. Problems? ------------ -If you experience problems compiling, installing or running OpenSSH. +If you experience problems compiling, installing or running OpenSSH. Please refer to the "reporting bugs" section of the webpage at http://www.openssh.com/ -$Id: INSTALL,v 1.56.2.4 2003/09/23 09:24:21 djm Exp $ +$Id: INSTALL,v 1.63 2003/11/21 12:48:55 djm Exp $ diff -ru --new-file openssh-3.7.1p2/LICENCE openssh-3.8p1/LICENCE --- openssh-3.7.1p2/LICENCE 2003-08-26 12:09:53.000000000 +1000 +++ openssh-3.8p1/LICENCE 2004-02-10 13:01:14.000000000 +1100 @@ -45,16 +45,16 @@ software are publicly available on the Internet and at any major bookstore, scientific library, and patent office worldwide. More information can be found e.g. at "http://www.cs.hut.fi/crypto". - + The legal status of this program is some combination of all these permissions and restrictions. Use only at your own responsibility. You will be responsible for any legal consequences yourself; I am not making any claims whether possessing or using this is legal or not in your country, and I am not taking any responsibility on your behalf. - - - NO WARRANTY - + + + NO WARRANTY + BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES @@ -64,7 +64,7 @@ TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION. - + IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, @@ -112,15 +112,15 @@ with the following license: * @version 3.0 (December 2000) - * + * * Optimised ANSI C code for the Rijndael cipher (now AES) - * + * * @author Vincent Rijmen * @author Antoon Bosselaers * @author Paulo Barreto - * + * * This code is hereby placed in the public domain. - * + * * THIS SOFTWARE IS PROVIDED BY THE AUTHORS ''AS IS'' AND ANY EXPRESS * OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE @@ -177,13 +177,12 @@ Damien Miller Kevin Steves Daniel Kouril - Per Allansson Wesley Griffin Per Allansson Nils Nordman Simon Wilkinson - Portable OpenSSH additionally includes code from the following copyright + Portable OpenSSH additionally includes code from the following copyright holders, also under the 2-term BSD license: Ben Lindstrom @@ -203,6 +202,7 @@ Todd C. Miller Wayne Schroeder William Jones + Darren Tucker * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions @@ -229,24 +229,24 @@ a) md5crypt.c, md5crypt.h * "THE BEER-WARE LICENSE" (Revision 42): - * wrote this file. As long as you retain this - * notice you can do whatever you want with this stuff. If we meet - * some day, and you think this stuff is worth it, you can buy me a + * wrote this file. As long as you retain this + * notice you can do whatever you want with this stuff. If we meet + * some day, and you think this stuff is worth it, you can buy me a * beer in return. Poul-Henning Kamp b) snprintf replacement * Copyright Patrick Powell 1995 - * This code is based on code written by Patrick Powell - * (papowell@astart.com) It may be used for any purpose as long as this + * This code is based on code written by Patrick Powell + * (papowell@astart.com) It may be used for any purpose as long as this * notice remains intact on all source code distributions c) Compatibility code (openbsd-compat) - Apart from the previously mentioned licenses, various pieces of code + Apart from the previously mentioned licenses, various pieces of code in the openbsd-compat/ subdirectory are licensed as follows: - Some code is licensed under a 3-term BSD license, to the following + Some code is licensed under a 3-term BSD license, to the following copyright holders: Todd C. Miller @@ -279,7 +279,7 @@ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF * SUCH DAMAGE. - Some code is licensed under an ISC-style license, to the following + Some code is licensed under an ISC-style license, to the following copyright holders: Internet Software Consortium. @@ -297,7 +297,7 @@ * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. - Some code is licensed under a MIT-style license to the following + Some code is licensed under a MIT-style license to the following copyright holders: Free Software Foundation, Inc. @@ -329,4 +329,4 @@ ------ -$OpenBSD: LICENCE,v 1.17 2003/08/22 20:55:06 markus Exp $ +$OpenBSD: LICENCE,v 1.18 2003/11/21 11:57:02 djm Exp $ diff -ru --new-file openssh-3.7.1p2/Makefile openssh-3.8p1/Makefile --- openssh-3.7.1p2/Makefile 2004-01-02 16:41:40.000000000 +1100 +++ openssh-3.8p1/Makefile 1970-01-01 10:00:00.000000000 +1000 @@ -1,405 +0,0 @@ -# $Id: Makefile.in,v 1.249.2.1 2003/09/22 01:00:12 dtucker Exp $ - -# uncomment if you run a non bourne compatable shell. Ie. csh -#SHELL = /bin/sh - -AUTORECONF=autoreconf - -prefix=/opt/openssh -exec_prefix=${prefix} -bindir=${exec_prefix}/bin -sbindir=${exec_prefix}/sbin -libexecdir=${exec_prefix}/libexec -datadir=${prefix}/share -mandir=${prefix}/man -mansubdir=man -sysconfdir=${prefix}/etc -piddir=/var/run -srcdir=. -top_srcdir=. - -DESTDIR= - -SSH_PROGRAM=${exec_prefix}/bin/ssh -ASKPASS_PROGRAM=$(libexecdir)/ssh-askpass -SFTP_SERVER=$(libexecdir)/sftp-server -SSH_KEYSIGN=$(libexecdir)/ssh-keysign -RAND_HELPER=$(libexecdir)/ssh-rand-helper -PRIVSEP_PATH=/var/empty -SSH_PRIVSEP_USER=sshd -STRIP_OPT=-s - -PATHS= -DSSHDIR=\"$(sysconfdir)\" \ - -D_PATH_SSH_PROGRAM=\"$(SSH_PROGRAM)\" \ - -D_PATH_SSH_ASKPASS_DEFAULT=\"$(ASKPASS_PROGRAM)\" \ - -D_PATH_SFTP_SERVER=\"$(SFTP_SERVER)\" \ - -D_PATH_SSH_KEY_SIGN=\"$(SSH_KEYSIGN)\" \ - -D_PATH_SSH_PIDDIR=\"$(piddir)\" \ - -D_PATH_PRIVSEP_CHROOT_DIR=\"$(PRIVSEP_PATH)\" \ - -DSSH_RAND_HELPER=\"$(RAND_HELPER)\" - -CC=gcc -LD=gcc -CFLAGS=-g -O2 -Wall -Wpointer-arith -Wno-uninitialized -CPPFLAGS=-I. -I$(srcdir) -I/usr/local/ssl/include $(PATHS) -DHAVE_CONFIG_H -LIBS=-lutil -lz -lnsl -lcrypto -lcrypt -LIBPAM= -LIBWRAP= -AR=/usr/local/bin/ar -AWK=gawk -RANLIB=ranlib -INSTALL=/usr/bin/install -c -PERL=/usr/local/bin/perl -SED=/bin/sed -ENT= -XAUTH_PATH=/usr/X11R6/bin/xauth -LDFLAGS=-L. -Lopenbsd-compat/ -L/usr/local/ssl/lib -L/usr/local/lib -EXEEXT= - -INSTALL_SSH_PRNG_CMDS= -INSTALL_SSH_RAND_HELPER= - -TARGETS=ssh$(EXEEXT) sshd$(EXEEXT) ssh-add$(EXEEXT) ssh-keygen$(EXEEXT) ssh-keyscan${EXEEXT} ssh-keysign${EXEEXT} ssh-agent$(EXEEXT) scp$(EXEEXT) ssh-rand-helper${EXEEXT} sftp-server$(EXEEXT) sftp$(EXEEXT) - -LIBSSH_OBJS=authfd.o authfile.o bufaux.o buffer.o canohost.o channels.o \ - cipher.o cipher-aes.o cipher-bf1.o cipher-ctr.o cipher-3des1.o \ - compat.o compress.o crc32.o deattack.o fatal.o \ - hostfile.o log.o match.o moduli.o mpaux.o nchan.o packet.o \ - readpass.o rsa.o tildexpand.o ttymodes.o xmalloc.o atomicio.o \ - key.o dispatch.o kex.o mac.o uuencode.o misc.o \ - rijndael.o ssh-dss.o ssh-rsa.o dh.o kexdh.o kexgex.o \ - kexdhc.o kexgexc.o scard.o msg.o progressmeter.o dns.o \ - entropy.o scard-opensc.o gss-genr.o - -SSHOBJS= ssh.o readconf.o clientloop.o sshtty.o \ - sshconnect.o sshconnect1.o sshconnect2.o - -SSHDOBJS=sshd.o auth-rhosts.o auth-passwd.o auth-rsa.o auth-rh-rsa.o \ - sshpty.o sshlogin.o servconf.o serverloop.o uidswap.o \ - auth.o auth1.o auth2.o auth-options.o session.o \ - auth-chall.o auth2-chall.o groupaccess.o \ - auth-skey.o auth-bsdauth.o auth2-hostbased.o auth2-kbdint.o \ - auth2-none.o auth2-passwd.o auth2-pubkey.o \ - monitor_mm.o monitor.o monitor_wrap.o monitor_fdpass.o \ - kexdhs.o kexgexs.o \ - auth-krb5.o \ - auth2-gss.o gss-serv.o gss-serv-krb5.o \ - loginrec.o auth-pam.o auth-sia.o md5crypt.o - -MANPAGES = scp.1.out ssh-add.1.out ssh-agent.1.out ssh-keygen.1.out ssh-keyscan.1.out ssh.1.out sshd.8.out sftp-server.8.out sftp.1.out ssh-rand-helper.8.out ssh-keysign.8.out sshd_config.5.out ssh_config.5.out -MANPAGES_IN = scp.1 ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh-keyscan.1 ssh.1 sshd.8 sftp-server.8 sftp.1 ssh-rand-helper.8 ssh-keysign.8 sshd_config.5 ssh_config.5 -MANTYPE = doc - -CONFIGFILES=sshd_config.out ssh_config.out moduli.out -CONFIGFILES_IN=sshd_config ssh_config moduli - -PATHSUBS = \ - -e 's|/etc/ssh/ssh_prng_cmds|$(sysconfdir)/ssh_prng_cmds|g' \ - -e 's|/etc/ssh/ssh_config|$(sysconfdir)/ssh_config|g' \ - -e 's|/etc/ssh/ssh_known_hosts|$(sysconfdir)/ssh_known_hosts|g' \ - -e 's|/etc/ssh/sshd_config|$(sysconfdir)/sshd_config|g' \ - -e 's|/usr/libexec|$(libexecdir)|g' \ - -e 's|/etc/shosts.equiv|$(sysconfdir)/shosts.equiv|g' \ - -e 's|/etc/ssh/ssh_host_key|$(sysconfdir)/ssh_host_key|g' \ - -e 's|/etc/ssh/ssh_host_dsa_key|$(sysconfdir)/ssh_host_dsa_key|g' \ - -e 's|/etc/ssh/ssh_host_rsa_key|$(sysconfdir)/ssh_host_rsa_key|g' \ - -e 's|/var/run/sshd.pid|$(piddir)/sshd.pid|g' \ - -e 's|/etc/ssh/moduli|$(sysconfdir)/moduli|g' \ - -e 's|/etc/sshrc|$(sysconfdir)/sshrc|g' \ - -e 's|/usr/X11R6/bin/xauth|$(XAUTH_PATH)|g' \ - -e 's|/var/empty|$(PRIVSEP_PATH)|g' \ - -e 's|/usr/bin:/bin:/usr/sbin:/sbin|/usr/bin:/bin:/usr/sbin:/sbin:/opt/openssh/bin|g' - -FIXPATHSCMD = $(SED) $(PATHSUBS) - -all: $(CONFIGFILES) ssh_prng_cmds.out $(MANPAGES) $(TARGETS) - -$(LIBSSH_OBJS): Makefile.in config.h -$(SSHOBJS): Makefile.in config.h -$(SSHDOBJS): Makefile.in config.h - -.c.o: - $(CC) $(CFLAGS) $(CPPFLAGS) -c $< - -LIBCOMPAT=openbsd-compat/libopenbsd-compat.a -$(LIBCOMPAT): always - (cd openbsd-compat && $(MAKE)) -always: - -libssh.a: $(LIBSSH_OBJS) - $(AR) rv $@ $(LIBSSH_OBJS) - $(RANLIB) $@ - -ssh$(EXEEXT): $(LIBCOMPAT) libssh.a $(SSHOBJS) - $(LD) -o $@ $(SSHOBJS) $(LDFLAGS) -lssh -lopenbsd-compat $(LIBS) - -sshd$(EXEEXT): libssh.a $(LIBCOMPAT) $(SSHDOBJS) - $(LD) -o $@ $(SSHDOBJS) $(LDFLAGS) -lssh -lopenbsd-compat $(LIBWRAP) $(LIBPAM) $(LIBS) - -scp$(EXEEXT): $(LIBCOMPAT) libssh.a scp.o progressmeter.o - $(LD) -o $@ scp.o progressmeter.o $(LDFLAGS) -lssh -lopenbsd-compat $(LIBS) - -ssh-add$(EXEEXT): $(LIBCOMPAT) libssh.a ssh-add.o - $(LD) -o $@ ssh-add.o $(LDFLAGS) -lssh -lopenbsd-compat $(LIBS) - -ssh-agent$(EXEEXT): $(LIBCOMPAT) libssh.a ssh-agent.o - $(LD) -o $@ ssh-agent.o $(LDFLAGS) -lssh -lopenbsd-compat $(LIBS) - -ssh-keygen$(EXEEXT): $(LIBCOMPAT) libssh.a ssh-keygen.o - $(LD) -o $@ ssh-keygen.o $(LDFLAGS) -lssh -lopenbsd-compat $(LIBS) - -ssh-keysign$(EXEEXT): $(LIBCOMPAT) libssh.a ssh-keysign.o - $(LD) -o $@ ssh-keysign.o readconf.o $(LDFLAGS) -lssh -lopenbsd-compat $(LIBS) - -ssh-keyscan$(EXEEXT): $(LIBCOMPAT) libssh.a ssh-keyscan.o - $(LD) -o $@ ssh-keyscan.o $(LDFLAGS) -lssh -lopenbsd-compat -lssh $(LIBS) - -sftp-server$(EXEEXT): $(LIBCOMPAT) libssh.a sftp.o sftp-common.o sftp-server.o - $(LD) -o $@ sftp-server.o sftp-common.o $(LDFLAGS) -lssh -lopenbsd-compat $(LIBS) - -sftp$(EXEEXT): $(LIBCOMPAT) libssh.a sftp.o sftp-client.o sftp-int.o sftp-common.o sftp-glob.o progressmeter.o - $(LD) -o $@ progressmeter.o sftp.o sftp-client.o sftp-common.o sftp-int.o sftp-glob.o $(LDFLAGS) -lssh -lopenbsd-compat $(LIBS) - -ssh-rand-helper${EXEEXT}: $(LIBCOMPAT) libssh.a ssh-rand-helper.o - $(LD) -o $@ ssh-rand-helper.o $(LDFLAGS) -lssh -lopenbsd-compat $(LIBS) - -# test driver for the loginrec code - not built by default -logintest: logintest.o $(LIBCOMPAT) libssh.a loginrec.o - $(LD) -o $@ logintest.o $(LDFLAGS) loginrec.o -lopenbsd-compat -lssh $(LIBS) - -$(MANPAGES): $(MANPAGES_IN) - if test "$(MANTYPE)" = "cat"; then \ - manpage=$(srcdir)/`echo $@ | sed 's/\.[1-9]\.out$$/\.0/'`; \ - else \ - manpage=$(srcdir)/`echo $@ | sed 's/\.out$$//'`; \ - fi; \ - if test "$(MANTYPE)" = "man"; then \ - $(FIXPATHSCMD) $${manpage} | $(AWK) -f $(srcdir)/mdoc2man.awk > $@; \ - else \ - $(FIXPATHSCMD) $${manpage} > $@; \ - fi - -$(CONFIGFILES): $(CONFIGFILES_IN) - conffile=`echo $@ | sed 's/.out$$//'`; \ - $(FIXPATHSCMD) $(srcdir)/$${conffile} > $@ - -ssh_prng_cmds.out: ssh_prng_cmds - if test ! -z "$(INSTALL_SSH_PRNG_CMDS)"; then \ - $(PERL) $(srcdir)/fixprogs ssh_prng_cmds $(ENT); \ - fi - -# fake rule to stop make trying to compile moduli.o into a binary "modulo" -moduli: - echo - -clean: regressclean - rm -f *.o *.a $(TARGETS) logintest config.cache config.log - rm -f *.out core - (cd openbsd-compat && $(MAKE) clean) - -distclean: regressclean - rm -f *.o *.a $(TARGETS) logintest config.cache config.log - rm -f *.out core - rm -f Makefile config.h config.status ssh_prng_cmds *~ - rm -rf autom4te.cache - (cd openbsd-compat && $(MAKE) distclean) - (cd scard && $(MAKE) distclean) - -veryclean: distclean - rm -f configure config.h.in *.0 - -mrproper: veryclean - -realclean: veryclean - -catman-do: - @for f in $(MANPAGES_IN) ; do \ - base=`echo $$f | sed 's/\..*$$//'` ; \ - echo "$$f -> $$base.0" ; \ - nroff -mandoc $$f | cat -v | sed -e 's/.\^H//g' \ - >$$base.0 ; \ - done - -distprep: catman-do - $(AUTORECONF) - (cd scard && $(MAKE) -f Makefile.in distprep) - -install: $(CONFIGFILES) ssh_prng_cmds.out $(MANPAGES) $(TARGETS) install-files host-key check-config -install-nokeys: $(CONFIGFILES) ssh_prng_cmds.out $(MANPAGES) $(TARGETS) install-files - -check-config: - -$(DESTDIR)$(sbindir)/sshd -t -f $(DESTDIR)$(sysconfdir)/sshd_config - -scard-install: - (cd scard && $(MAKE) DESTDIR=$(DESTDIR) install) - -install-files: scard-install - $(srcdir)/mkinstalldirs $(DESTDIR)$(bindir) - $(srcdir)/mkinstalldirs $(DESTDIR)$(sbindir) - $(srcdir)/mkinstalldirs $(DESTDIR)$(mandir) - $(srcdir)/mkinstalldirs $(DESTDIR)$(datadir) - $(srcdir)/mkinstalldirs $(DESTDIR)$(mandir)/$(mansubdir)1 - $(srcdir)/mkinstalldirs $(DESTDIR)$(mandir)/$(mansubdir)5 - $(srcdir)/mkinstalldirs $(DESTDIR)$(mandir)/$(mansubdir)8 - $(srcdir)/mkinstalldirs $(DESTDIR)$(libexecdir) - (umask 022 ; $(srcdir)/mkinstalldirs $(DESTDIR)$(PRIVSEP_PATH)) - $(INSTALL) -m 0755 $(STRIP_OPT) ssh $(DESTDIR)$(bindir)/ssh - $(INSTALL) -m 0755 $(STRIP_OPT) scp $(DESTDIR)$(bindir)/scp - $(INSTALL) -m 0755 $(STRIP_OPT) ssh-add $(DESTDIR)$(bindir)/ssh-add - $(INSTALL) -m 0755 $(STRIP_OPT) ssh-agent $(DESTDIR)$(bindir)/ssh-agent - $(INSTALL) -m 0755 $(STRIP_OPT) ssh-keygen $(DESTDIR)$(bindir)/ssh-keygen - $(INSTALL) -m 0755 $(STRIP_OPT) ssh-keyscan $(DESTDIR)$(bindir)/ssh-keyscan - $(INSTALL) -m 0755 $(STRIP_OPT) sshd $(DESTDIR)$(sbindir)/sshd - if test ! -z "$(INSTALL_SSH_RAND_HELPER)" ; then \ - $(INSTALL) -m 0755 $(STRIP_OPT) ssh-rand-helper $(DESTDIR)$(libexecdir)/ssh-rand-helper ; \ - fi - $(INSTALL) -m 4711 $(STRIP_OPT) ssh-keysign $(DESTDIR)$(SSH_KEYSIGN) - $(INSTALL) -m 0755 $(STRIP_OPT) sftp $(DESTDIR)$(bindir)/sftp - $(INSTALL) -m 0755 $(STRIP_OPT) sftp-server $(DESTDIR)$(SFTP_SERVER) - $(INSTALL) -m 644 ssh.1.out $(DESTDIR)$(mandir)/$(mansubdir)1/ssh.1 - $(INSTALL) -m 644 scp.1.out $(DESTDIR)$(mandir)/$(mansubdir)1/scp.1 - $(INSTALL) -m 644 ssh-add.1.out $(DESTDIR)$(mandir)/$(mansubdir)1/ssh-add.1 - $(INSTALL) -m 644 ssh-agent.1.out $(DESTDIR)$(mandir)/$(mansubdir)1/ssh-agent.1 - $(INSTALL) -m 644 ssh-keygen.1.out $(DESTDIR)$(mandir)/$(mansubdir)1/ssh-keygen.1 - $(INSTALL) -m 644 ssh-keyscan.1.out $(DESTDIR)$(mandir)/$(mansubdir)1/ssh-keyscan.1 - $(INSTALL) -m 644 sshd_config.5.out $(DESTDIR)$(mandir)/$(mansubdir)5/sshd_config.5 - $(INSTALL) -m 644 ssh_config.5.out $(DESTDIR)$(mandir)/$(mansubdir)5/ssh_config.5 - $(INSTALL) -m 644 sshd.8.out $(DESTDIR)$(mandir)/$(mansubdir)8/sshd.8 - if [ ! -z "$(INSTALL_SSH_RAND_HELPER)" ]; then \ - $(INSTALL) -m 644 ssh-rand-helper.8.out $(DESTDIR)$(mandir)/$(mansubdir)8/ssh-rand-helper.8 ; \ - fi - $(INSTALL) -m 644 sftp.1.out $(DESTDIR)$(mandir)/$(mansubdir)1/sftp.1 - $(INSTALL) -m 644 sftp-server.8.out $(DESTDIR)$(mandir)/$(mansubdir)8/sftp-server.8 - $(INSTALL) -m 644 ssh-keysign.8.out $(DESTDIR)$(mandir)/$(mansubdir)8/ssh-keysign.8 - -rm -f $(DESTDIR)$(bindir)/slogin - ln -s ./ssh$(EXEEXT) $(DESTDIR)$(bindir)/slogin - -rm -f $(DESTDIR)$(mandir)/$(mansubdir)1/slogin.1 - ln -s ./ssh.1 $(DESTDIR)$(mandir)/$(mansubdir)1/slogin.1 - if [ ! -d $(DESTDIR)$(sysconfdir) ]; then \ - $(srcdir)/mkinstalldirs $(DESTDIR)$(sysconfdir); \ - fi - @if [ ! -f $(DESTDIR)$(sysconfdir)/ssh_config ]; then \ - $(INSTALL) -m 644 ssh_config.out $(DESTDIR)$(sysconfdir)/ssh_config; \ - else \ - echo "$(DESTDIR)$(sysconfdir)/ssh_config already exists, install will not overwrite"; \ - fi - @if [ ! -f $(DESTDIR)$(sysconfdir)/sshd_config ]; then \ - $(INSTALL) -m 644 sshd_config.out $(DESTDIR)$(sysconfdir)/sshd_config; \ - else \ - echo "$(DESTDIR)$(sysconfdir)/sshd_config already exists, install will not overwrite"; \ - fi - @if [ -f ssh_prng_cmds -a ! -z "$(INSTALL_SSH_PRNG_CMDS)" ]; then \ - if [ ! -f $(DESTDIR)$(sysconfdir)/ssh_prng_cmds ] ; then \ - $(INSTALL) -m 644 ssh_prng_cmds.out $(DESTDIR)$(sysconfdir)/ssh_prng_cmds; \ - else \ - echo "$(DESTDIR)$(sysconfdir)/ssh_prng_cmds already exists, install will not overwrite"; \ - fi ; \ - fi - @if [ ! -f $(DESTDIR)$(sysconfdir)/moduli ]; then \ - if [ -f $(DESTDIR)$(sysconfdir)/primes ]; then \ - echo "moving $(DESTDIR)$(sysconfdir)/primes to $(DESTDIR)$(sysconfdir)/moduli"; \ - mv "$(DESTDIR)$(sysconfdir)/primes" "$(DESTDIR)$(sysconfdir)/moduli"; \ - else \ - $(INSTALL) -m 644 moduli.out $(DESTDIR)$(sysconfdir)/moduli; \ - fi ; \ - else \ - echo "$(DESTDIR)$(sysconfdir)/moduli already exists, install will not overwrite"; \ - fi - -host-key: ssh-keygen$(EXEEXT) - @if [ -z "$(DESTDIR)" ] ; then \ - if [ -f "$(DESTDIR)$(sysconfdir)/ssh_host_key" ] ; then \ - echo "$(DESTDIR)$(sysconfdir)/ssh_host_key already exists, skipping." ; \ - else \ - ./ssh-keygen -t rsa1 -f $(DESTDIR)$(sysconfdir)/ssh_host_key -N "" ; \ - fi ; \ - if [ -f $(DESTDIR)$(sysconfdir)/ssh_host_dsa_key ] ; then \ - echo "$(DESTDIR)$(sysconfdir)/ssh_host_dsa_key already exists, skipping." ; \ - else \ - ./ssh-keygen -t dsa -f $(DESTDIR)$(sysconfdir)/ssh_host_dsa_key -N "" ; \ - fi ; \ - if [ -f $(DESTDIR)$(sysconfdir)/ssh_host_rsa_key ] ; then \ - echo "$(DESTDIR)$(sysconfdir)/ssh_host_rsa_key already exists, skipping." ; \ - else \ - ./ssh-keygen -t rsa -f $(DESTDIR)$(sysconfdir)/ssh_host_rsa_key -N "" ; \ - fi ; \ - fi ; - -host-key-force: ssh-keygen$(EXEEXT) - ./ssh-keygen -t rsa1 -f $(DESTDIR)$(sysconfdir)/ssh_host_key -N "" - ./ssh-keygen -t dsa -f $(DESTDIR)$(sysconfdir)/ssh_host_dsa_key -N "" - ./ssh-keygen -t rsa -f $(DESTDIR)$(sysconfdir)/ssh_host_rsa_key -N "" - -uninstallall: uninstall - -rm -f $(DESTDIR)$(sysconfdir)/ssh_config - -rm -f $(DESTDIR)$(sysconfdir)/sshd_config - -rm -f $(DESTDIR)$(sysconfdir)/ssh_prng_cmds - -rmdir $(DESTDIR)$(sysconfdir) - -rmdir $(DESTDIR)$(bindir) - -rmdir $(DESTDIR)$(sbindir) - -rmdir $(DESTDIR)$(mandir)/$(mansubdir)1 - -rmdir $(DESTDIR)$(mandir)/$(mansubdir)8 - -rmdir $(DESTDIR)$(mandir) - -rmdir $(DESTDIR)$(libexecdir) - -uninstall: - -rm -f $(DESTDIR)$(bindir)/slogin - -rm -f $(DESTDIR)$(bindir)/ssh$(EXEEXT) - -rm -f $(DESTDIR)$(bindir)/scp$(EXEEXT) - -rm -f $(DESTDIR)$(bindir)/ssh-add$(EXEEXT) - -rm -f $(DESTDIR)$(bindir)/ssh-agent$(EXEEXT) - -rm -f $(DESTDIR)$(bindir)/ssh-keygen$(EXEEXT) - -rm -f $(DESTDIR)$(bindir)/ssh-keyscan$(EXEEXT) - -rm -f $(DESTDIR)$(bindir)/sftp$(EXEEXT) - -rm -f $(DESTDIR)$(sbindir)/sshd$(EXEEXT) - -rm -r $(DESTDIR)$(SFTP_SERVER)$(EXEEXT) - -rm -f $(DESTDIR)$(SSH_KEYSIGN)$(EXEEXT) - -rm -f $(DESTDIR)$(RAND_HELPER)$(EXEEXT) - -rm -f $(DESTDIR)$(mandir)/$(mansubdir)1/ssh.1 - -rm -f $(DESTDIR)$(mandir)/$(mansubdir)1/scp.1 - -rm -f $(DESTDIR)$(mandir)/$(mansubdir)1/ssh-add.1 - -rm -f $(DESTDIR)$(mandir)/$(mansubdir)1/ssh-agent.1 - -rm -f $(DESTDIR)$(mandir)/$(mansubdir)1/ssh-keygen.1 - -rm -f $(DESTDIR)$(mandir)/$(mansubdir)1/sftp.1 - -rm -f $(DESTDIR)$(mandir)/$(mansubdir)1/ssh-keyscan.1 - -rm -f $(DESTDIR)$(mandir)/$(mansubdir)8/sshd.8 - -rm -f $(DESTDIR)$(mandir)/$(mansubdir)8/ssh-rand-helper.8 - -rm -f $(DESTDIR)$(mandir)/$(mansubdir)8/sftp-server.8 - -rm -f $(DESTDIR)$(mandir)/$(mansubdir)8/ssh-keysign.8 - -rm -f $(DESTDIR)$(mandir)/$(mansubdir)1/slogin.1 - -tests: $(TARGETS) - BUILDDIR=`pwd`; \ - [ -d `pwd`/regress ] || mkdir -p `pwd`/regress; \ - [ -f `pwd`/regress/Makefile ] || \ - ln -s $(srcdir)/regress/Makefile `pwd`/regress/Makefile ; \ - TEST_SSH_SSH="$${BUILDDIR}/ssh"; \ - TEST_SSH_SSHD="$${BUILDDIR}/sshd"; \ - TEST_SSH_SSHAGENT="$${BUILDDIR}/ssh-agent"; \ - TEST_SSH_SSHADD="$${BUILDDIR}/ssh-add"; \ - TEST_SSH_SSHKEYGEN="$${BUILDDIR}/ssh-keygen"; \ - TEST_SSH_SSHKEYSCAN="$${BUILDDIR}/ssh-keyscan"; \ - TEST_SSH_SFTP="$${BUILDDIR}/sftp"; \ - TEST_SSH_SFTPSERVER="$${BUILDDIR}/sftp-server"; \ - cd $(srcdir)/regress || exit $$?; \ - $(MAKE) \ - .OBJDIR="$${BUILDDIR}/regress" \ - .CURDIR="`pwd`" \ - BUILDDIR="$${BUILDDIR}" \ - OBJ="$${BUILDDIR}/regress/" \ - PATH="$${BUILDDIR}:$${PATH}" \ - TEST_SSH_SSH="$${TEST_SSH_SSH}" \ - TEST_SSH_SSHD="$${TEST_SSH_SSHD}" \ - TEST_SSH_SSHAGENT="$${TEST_SSH_SSHAGENT}" \ - TEST_SSH_SSHADD="$${TEST_SSH_SSHADD}" \ - TEST_SSH_SSHKEYGEN="$${TEST_SSH_SSHKEYGEN}" \ - TEST_SSH_SSHKEYSCAN="$${TEST_SSH_SSHKEYSCAN}" \ - TEST_SSH_SFTP="$${TEST_SSH_SFTP}" \ - TEST_SSH_SFTPSERVER="$${TEST_SSH_SFTPSERVER}" \ - EXEEXT="$(EXEEXT)" \ - $@ - -regressclean: - if [ -f regress/Makefile -a -r regress/Makefile ]; then \ - (cd regress && $(MAKE) clean) \ - fi diff -ru --new-file openssh-3.7.1p2/Makefile.in openssh-3.8p1/Makefile.in --- openssh-3.7.1p2/Makefile.in 2003-09-22 11:00:12.000000000 +1000 +++ openssh-3.8p1/Makefile.in 2004-02-18 14:35:11.000000000 +1100 @@ -1,4 +1,4 @@ -# $Id: Makefile.in,v 1.249.2.1 2003/09/22 01:00:12 dtucker Exp $ +# $Id: Makefile.in,v 1.257 2004/02/18 03:35:11 djm Exp $ # uncomment if you run a non bourne compatable shell. Ie. csh #SHELL = @SH@ @@ -61,12 +61,13 @@ TARGETS=ssh$(EXEEXT) sshd$(EXEEXT) ssh-add$(EXEEXT) ssh-keygen$(EXEEXT) ssh-keyscan${EXEEXT} ssh-keysign${EXEEXT} ssh-agent$(EXEEXT) scp$(EXEEXT) ssh-rand-helper${EXEEXT} sftp-server$(EXEEXT) sftp$(EXEEXT) -LIBSSH_OBJS=authfd.o authfile.o bufaux.o buffer.o canohost.o channels.o \ - cipher.o cipher-aes.o cipher-bf1.o cipher-ctr.o cipher-3des1.o \ - compat.o compress.o crc32.o deattack.o fatal.o \ - hostfile.o log.o match.o moduli.o mpaux.o nchan.o packet.o \ - readpass.o rsa.o tildexpand.o ttymodes.o xmalloc.o atomicio.o \ - key.o dispatch.o kex.o mac.o uuencode.o misc.o \ +LIBSSH_OBJS=acss.o authfd.o authfile.o bufaux.o buffer.o \ + canohost.o channels.o cipher.o cipher-acss.o cipher-aes.o \ + cipher-bf1.o cipher-ctr.o cipher-3des1.o cleanup.o \ + compat.o compress.o crc32.o deattack.o fatal.o hostfile.o \ + log.o match.o moduli.o mpaux.o nchan.o packet.o \ + readpass.o rsa.o tildexpand.o ttymodes.o xmalloc.o \ + atomicio.o key.o dispatch.o kex.o mac.o uuencode.o misc.o \ rijndael.o ssh-dss.o ssh-rsa.o dh.o kexdh.o kexgex.o \ kexdhc.o kexgexc.o scard.o msg.o progressmeter.o dns.o \ entropy.o scard-opensc.o gss-genr.o @@ -84,7 +85,7 @@ kexdhs.o kexgexs.o \ auth-krb5.o \ auth2-gss.o gss-serv.o gss-serv-krb5.o \ - loginrec.o auth-pam.o auth-sia.o md5crypt.o + loginrec.o auth-pam.o auth-shadow.o auth-sia.o md5crypt.o MANPAGES = scp.1.out ssh-add.1.out ssh-agent.1.out ssh-keygen.1.out ssh-keyscan.1.out ssh.1.out sshd.8.out sftp-server.8.out sftp.1.out ssh-rand-helper.8.out ssh-keysign.8.out sshd_config.5.out ssh_config.5.out MANPAGES_IN = scp.1 ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh-keyscan.1 ssh.1 sshd.8 sftp-server.8 sftp.1 ssh-rand-helper.8 ssh-keysign.8 sshd_config.5 ssh_config.5 @@ -140,25 +141,25 @@ $(LD) -o $@ scp.o progressmeter.o $(LDFLAGS) -lssh -lopenbsd-compat $(LIBS) ssh-add$(EXEEXT): $(LIBCOMPAT) libssh.a ssh-add.o - $(LD) -o $@ ssh-add.o $(LDFLAGS) -lssh -lopenbsd-compat $(LIBS) + $(LD) -o $@ ssh-add.o $(LDFLAGS) -lssh -lopenbsd-compat $(LIBS) ssh-agent$(EXEEXT): $(LIBCOMPAT) libssh.a ssh-agent.o - $(LD) -o $@ ssh-agent.o $(LDFLAGS) -lssh -lopenbsd-compat $(LIBS) + $(LD) -o $@ ssh-agent.o $(LDFLAGS) -lssh -lopenbsd-compat $(LIBS) ssh-keygen$(EXEEXT): $(LIBCOMPAT) libssh.a ssh-keygen.o - $(LD) -o $@ ssh-keygen.o $(LDFLAGS) -lssh -lopenbsd-compat $(LIBS) + $(LD) -o $@ ssh-keygen.o $(LDFLAGS) -lssh -lopenbsd-compat $(LIBS) ssh-keysign$(EXEEXT): $(LIBCOMPAT) libssh.a ssh-keysign.o - $(LD) -o $@ ssh-keysign.o readconf.o $(LDFLAGS) -lssh -lopenbsd-compat $(LIBS) + $(LD) -o $@ ssh-keysign.o readconf.o $(LDFLAGS) -lssh -lopenbsd-compat $(LIBS) ssh-keyscan$(EXEEXT): $(LIBCOMPAT) libssh.a ssh-keyscan.o - $(LD) -o $@ ssh-keyscan.o $(LDFLAGS) -lssh -lopenbsd-compat -lssh $(LIBS) + $(LD) -o $@ ssh-keyscan.o $(LDFLAGS) -lssh -lopenbsd-compat -lssh $(LIBS) sftp-server$(EXEEXT): $(LIBCOMPAT) libssh.a sftp.o sftp-common.o sftp-server.o - $(LD) -o $@ sftp-server.o sftp-common.o $(LDFLAGS) -lssh -lopenbsd-compat $(LIBS) + $(LD) -o $@ sftp-server.o sftp-common.o $(LDFLAGS) -lssh -lopenbsd-compat $(LIBS) -sftp$(EXEEXT): $(LIBCOMPAT) libssh.a sftp.o sftp-client.o sftp-int.o sftp-common.o sftp-glob.o progressmeter.o - $(LD) -o $@ progressmeter.o sftp.o sftp-client.o sftp-common.o sftp-int.o sftp-glob.o $(LDFLAGS) -lssh -lopenbsd-compat $(LIBS) +sftp$(EXEEXT): $(LIBCOMPAT) libssh.a sftp.o sftp-client.o sftp-common.o sftp-glob.o progressmeter.o + $(LD) -o $@ progressmeter.o sftp.o sftp-client.o sftp-common.o sftp-glob.o $(LDFLAGS) -lssh -lopenbsd-compat $(LIBS) ssh-rand-helper${EXEEXT}: $(LIBCOMPAT) libssh.a ssh-rand-helper.o $(LD) -o $@ ssh-rand-helper.o $(LDFLAGS) -lssh -lopenbsd-compat $(LIBS) @@ -193,12 +194,12 @@ echo clean: regressclean - rm -f *.o *.a $(TARGETS) logintest config.cache config.log - rm -f *.out core + rm -f *.o *.a $(TARGETS) logintest config.cache config.log + rm -f *.out core (cd openbsd-compat && $(MAKE) clean) distclean: regressclean - rm -f *.o *.a $(TARGETS) logintest config.cache config.log + rm -f *.o *.a $(TARGETS) logintest config.cache config.log rm -f *.out core rm -f Makefile config.h config.status ssh_prng_cmds *~ rm -rf autom4te.cache @@ -222,6 +223,7 @@ distprep: catman-do $(AUTORECONF) + -rm -rf autom4te.cache (cd scard && $(MAKE) -f Makefile.in distprep) install: $(CONFIGFILES) ssh_prng_cmds.out $(MANPAGES) $(TARGETS) install-files host-key check-config @@ -342,7 +344,7 @@ -rmdir $(DESTDIR)$(mandir) -rmdir $(DESTDIR)$(libexecdir) -uninstall: +uninstall: -rm -f $(DESTDIR)$(bindir)/slogin -rm -f $(DESTDIR)$(bindir)/ssh$(EXEEXT) -rm -f $(DESTDIR)$(bindir)/scp$(EXEEXT) @@ -373,6 +375,7 @@ [ -d `pwd`/regress ] || mkdir -p `pwd`/regress; \ [ -f `pwd`/regress/Makefile ] || \ ln -s $(srcdir)/regress/Makefile `pwd`/regress/Makefile ; \ + TEST_SHELL="@TEST_MINUS_S_SH@"; \ TEST_SSH_SSH="$${BUILDDIR}/ssh"; \ TEST_SSH_SSHD="$${BUILDDIR}/sshd"; \ TEST_SSH_SSHAGENT="$${BUILDDIR}/ssh-agent"; \ @@ -388,6 +391,7 @@ BUILDDIR="$${BUILDDIR}" \ OBJ="$${BUILDDIR}/regress/" \ PATH="$${BUILDDIR}:$${PATH}" \ + TEST_SHELL="$${TEST_SHELL}" \ TEST_SSH_SSH="$${TEST_SSH_SSH}" \ TEST_SSH_SSHD="$${TEST_SSH_SSHD}" \ TEST_SSH_SSHAGENT="$${TEST_SSH_SSHAGENT}" \ diff -ru --new-file openssh-3.7.1p2/OVERVIEW openssh-3.8p1/OVERVIEW --- openssh-3.7.1p2/OVERVIEW 2001-09-25 12:55:37.000000000 +1000 +++ openssh-3.8p1/OVERVIEW 2003-11-21 23:48:55.000000000 +1100 @@ -5,7 +5,7 @@ This document is intended for those who wish to read the ssh source code. This tries to give an overview of the structure of the code. - + Copyright (c) 1995 Tatu Ylonen Updated 17 Nov 1995. Updated 19 Oct 1999 for OpenSSH-1.2 @@ -20,7 +20,7 @@ these programs. Buffer manipulation routines - + - These provide an arbitrary size buffer, where data can be appended. Data can be consumed from either end. The code is used heavily throughout ssh. The basic buffer manipulation functions are in @@ -28,7 +28,7 @@ data types is in bufaux.c. Compression Library - + - Ssh uses the GNU GZIP compression library (ZLIB). Encryption/Decryption @@ -89,7 +89,7 @@ code is linked into the server. The routines also manipulate known hosts files using code in hostfile.c. Code in canohost.c is used to retrieve the canonical host name of the remote host. - Code in match.c is used to match host names. + Code in match.c is used to match host names. - In the client end, authentication code is in sshconnect.c. It reads Passwords/passphrases using code in readpass.c. It reads @@ -147,10 +147,10 @@ operations, and finally the server enters the normal session mode by calling server_loop in serverloop.c. This does the real work, calling functions in other modules. - + - The code for the server is in sshd.c. It contains a lot of stuff, including: - - server main program + - server main program - waiting for connections - processing new connection - authentication @@ -162,9 +162,9 @@ - There are several other files in the distribution that contain various auxiliary routines: - ssh.h the main header file for ssh (various definitions) - getput.h byte-order independent storage of integers - includes.h includes most system headers. Lots of #ifdefs. + ssh.h the main header file for ssh (various definitions) + getput.h byte-order independent storage of integers + includes.h includes most system headers. Lots of #ifdefs. tildexpand.c expand tilde in file names uidswap.c uid-swapping xmalloc.c "safe" malloc routines diff -ru --new-file openssh-3.7.1p2/README openssh-3.8p1/README --- openssh-3.7.1p2/README 2003-01-08 23:28:40.000000000 +1100 +++ openssh-3.8p1/README 2004-02-24 16:13:24.000000000 +1100 @@ -1,4 +1,7 @@ -- A Japanese translation of this document and of the OpenSSH FAQ is +See: +http://www.openssh.com/txt/release-3.8 for the release notes. + +- A Japanese translation of this document and of the OpenSSH FAQ is - available at http://www.unixuser.org/~haruyama/security/openssh/index.html - Thanks to HARUYAMA Seigo @@ -13,10 +16,10 @@ and Dug Song. It has a homepage at http://www.openssh.com/ This port consists of the re-introduction of autoconf support, PAM -support (for Linux and Solaris), EGD[1]/PRNGD[2] support and replacements -for OpenBSD library functions that are (regrettably) absent from other -unices. This port has been best tested on Linux, Solaris, HP-UX, NetBSD, -Irix and AIX. Support for SCO, NeXT and other Unices is underway. +support (for Linux and Solaris), EGD[1]/PRNGD[2] support and replacements +for OpenBSD library functions that are (regrettably) absent from other +unices. This port has been best tested on Linux, Solaris, HP-UX, NetBSD, +Irix and AIX. Support for SCO, NeXT and other Unices is underway. This version actively tracks changes in the OpenBSD CVS repository. The PAM support is now more functional than the popular packages of @@ -32,20 +35,20 @@ openssh-unix-dev@mindrot.org. The list is open to posting by unsubscribed users. -If you are a citizen of an USA-embargoed country to which export of -cryptographic products is restricted, then please refrain from sending +If you are a citizen of an USA-embargoed country to which export of +cryptographic products is restricted, then please refrain from sending crypto-related code or patches to the list. We cannot accept them. Other code contribution are accepted, but please follow the OpenBSD style guidelines[6]. Please refer to the INSTALL document for information on how to install -OpenSSH on your system. There are a number of differences between this +OpenSSH on your system. There are a number of differences between this port of OpenSSH and F-Secure SSH 1.x, please refer to the OpenSSH FAQ[7] for details and general tips. Damien Miller -Miscellania - +Miscellania - This version of OpenSSH is based upon code retrieved from the OpenBSD CVS repository which in turn was based on the last free sample @@ -63,4 +66,4 @@ [6] http://www.openbsd.org/cgi-bin/man.cgi?query=style&sektion=9 [7] http://www.openssh.com/faq.html -$Id: README,v 1.51 2003/01/08 12:28:40 djm Exp $ +$Id: README,v 1.53 2004/02/24 05:13:24 dtucker Exp $ diff -ru --new-file openssh-3.7.1p2/README.dns openssh-3.8p1/README.dns --- openssh-3.7.1p2/README.dns 2003-05-15 13:23:36.000000000 +1000 +++ openssh-3.8p1/README.dns 2003-10-15 16:07:54.000000000 +1000 @@ -1,17 +1,13 @@ How to verify host keys using OpenSSH and DNS --------------------------------------------- -OpenSSH contains experimental support for verifying host keys using DNS -as described in draft-ietf-secsh-dns-xx.txt. The document contains -very brief instructions on how to test this feature. Configuring DNS -and DNSSEC is out of the scope of this document. +OpenSSH contains support for verifying host keys using DNS as described in +draft-ietf-secsh-dns-05.txt. The document contains very brief instructions +on how to use this feature. Configuring DNS is out of the scope of this +document. -(1) Enable DNS fingerprint support in OpenSSH - - configure --with-dns - -(2) Generate and publish the DNS RR +(1) Server: Generate and publish the DNS RR To create a DNS resource record (RR) containing a fingerprint of the public host key, use the following command: @@ -24,15 +20,14 @@ In the example above, ssh-keygen will print the fingerprint in a generic DNS RR format parsable by most modern name server -implementations. If your nameserver has support for the SSHFP RR, as -defined by the draft, you can omit the -g flag and ssh-keygen will -print a standard RR. +implementations. If your nameserver has support for the SSHFP RR +you can omit the -g flag and ssh-keygen will print a standard SSHFP RR. To publish the fingerprint using the DNS you must add the generated RR to your DNS zone file and sign your zone. -(3) Enable the ssh client to verify host keys using DNS +(2) Client: Enable ssh to verify host keys using DNS To enable the ssh client to verify host keys using DNS, you have to add the following option to the ssh configuration file @@ -49,4 +44,4 @@ Wesley Griffin -$OpenBSD: README.dns,v 1.1 2003/05/14 18:16:20 jakob Exp $ +$OpenBSD: README.dns,v 1.2 2003/10/14 19:43:23 jakob Exp $ diff -ru --new-file openssh-3.7.1p2/README.platform openssh-3.8p1/README.platform --- openssh-3.7.1p2/README.platform 1970-01-01 10:00:00.000000000 +1000 +++ openssh-3.8p1/README.platform 2004-02-24 16:14:41.000000000 +1100 @@ -0,0 +1,22 @@ +This file contains notes about OpenSSH on specific platforms. + +AIX +--- +As of OpenSSH 3.8p1, sshd will now honour an accounts password expiry +settings, where previously it did not. Because of this, it's possible for +sites that have used OpenSSH's sshd exclusively to have accounts which +have passwords expired longer than the inactive time (ie the "Weeks between +password EXPIRATION and LOCKOUT" setting in SMIT or the maxexpired +chuser attribute). + +Accounts in this state must have their passwords reset manually by the +administrator. As a precaution, it is recommended that the administrative +passwords be reset before upgrading from OpenSSH <3.8. + +Solaris +------- +Currently, sshd does not support BSM auditting. This can show up as errors +when editting cron entries via crontab. See. +http://bugzilla.mindrot.org/show_bug.cgi?id=125 + +$Id: README.platform,v 1.1 2004/02/24 05:14:41 dtucker Exp $ diff -ru --new-file openssh-3.7.1p2/README.privsep openssh-3.8p1/README.privsep --- openssh-3.7.1p2/README.privsep 2003-08-26 10:48:15.000000000 +1000 +++ openssh-3.8p1/README.privsep 2003-11-21 23:48:55.000000000 +1100 @@ -1,15 +1,15 @@ Privilege separation, or privsep, is method in OpenSSH by which operations that require root privilege are performed by a separate privileged monitor process. Its purpose is to prevent privilege -escalation by containing corruption to an unprivileged process. +escalation by containing corruption to an unprivileged process. More information is available at: http://www.citi.umich.edu/u/provos/ssh/privsep.html Privilege separation is now enabled by default; see the UsePrivilegeSeparation option in sshd_config(5). -On systems which lack mmap or anonymous (MAP_ANON) memory mapping, -compression must be disabled in order for privilege separation to +On systems which lack mmap or anonymous (MAP_ANON) memory mapping, +compression must be disabled in order for privilege separation to function. When privsep is enabled, during the pre-authentication phase sshd will @@ -38,9 +38,9 @@ Privsep requires operating system support for file descriptor passing. Compression will be disabled on systems without a working mmap MAP_ANON. -PAM-enabled OpenSSH is known to function with privsep on Linux. +PAM-enabled OpenSSH is known to function with privsep on Linux. It does not function on HP-UX with a trusted system -configuration. +configuration. On Compaq Tru64 Unix, only the pre-authentication part of privsep is supported. Post-authentication privsep is disabled automatically (so @@ -61,4 +61,4 @@ process 6917 is the privileged monitor process, 6919 is the user owned sshd process and 6921 is the shell process. -$Id: README.privsep,v 1.12 2003/08/26 00:48:15 djm Exp $ +$Id: README.privsep,v 1.13 2003/11/21 12:48:55 djm Exp $ diff -ru --new-file openssh-3.7.1p2/README.smartcard openssh-3.8p1/README.smartcard --- openssh-3.7.1p2/README.smartcard 2003-06-10 21:09:09.000000000 +1000 +++ openssh-3.8p1/README.smartcard 2003-11-21 23:48:55.000000000 +1100 @@ -1,7 +1,7 @@ How to use smartcards with OpenSSH? OpenSSH contains experimental support for authentication using -Cyberflex smartcards and TODOS card readers, in addition to the cards +Cyberflex smartcards and TODOS card readers, in addition to the cards with PKCS#15 structure supported by OpenSC. To enable this you need to: @@ -27,8 +27,8 @@ sectok> login -d sectok> jload /usr/libdata/ssh/Ssh.bin sectok> setpass - Enter new AUT0 passphrase: - Re-enter passphrase: + Enter new AUT0 passphrase: + Re-enter passphrase: sectok> quit Do not forget the passphrase. There is no way to @@ -51,9 +51,9 @@ $ sectok sectok> login -d - sectok> acl 0012 world: w - world: w - AUT0: w inval + sectok> acl 0012 world: w + world: w + AUT0: w inval sectok> quit If you do this, anyone who has access to your card @@ -90,4 +90,4 @@ -markus, Tue Jul 17 23:54:51 CEST 2001 -$OpenBSD: README.smartcard,v 1.8 2002/03/26 18:56:23 rees Exp $ +$OpenBSD: README.smartcard,v 1.9 2003/11/21 11:57:02 djm Exp $ diff -ru --new-file openssh-3.7.1p2/RFC.nroff openssh-3.8p1/RFC.nroff --- openssh-3.7.1p2/RFC.nroff 2000-11-06 12:39:34.000000000 +1100 +++ openssh-3.8p1/RFC.nroff 2003-11-21 23:48:55.000000000 +1100 @@ -137,7 +137,7 @@ authentication agent forwarding, and executing the shell or a command. When a shell or command is executed, the connection enters interactive -session mode. In this mode, data is passed in both directions, +session mode. In this mode, data is passed in both directions, new forwarded connections may be opened, etc. The interactive session normally terminates when the server sends the exit status of the program to the client. @@ -372,7 +372,7 @@ are not compatible increment the major version (which will hopefully never happen). The version described in this document is 1.3. -The client will +The client will .ti 0 Key Exchange and Server Host Authentication diff -ru --new-file openssh-3.7.1p2/TODO openssh-3.8p1/TODO --- openssh-3.7.1p2/TODO 2003-06-11 23:56:41.000000000 +1000 +++ openssh-3.8p1/TODO 2004-02-11 20:44:13.000000000 +1100 @@ -8,7 +8,7 @@ - Install FAQ? - General FAQ on S/Key, TIS, RSA, RSA2, DSA, etc and suggestions on when it - would be best to use them. + would be best to use them. - Create a Documentation/ directory? @@ -17,7 +17,7 @@ - Grep for 'XXX' comments and fix - Link order is incorrect for some systems using Kerberos 4 and AFS. Result - is multiple inclusion of DES symbols. Holger Trapp + is multiple inclusion of DES symbols. Holger Trapp reports that changing the configure generated link order from: -lresolv -lkrb -lz -lnsl -lutil -lkafs -lkrb -ldes -lcrypto @@ -26,12 +26,10 @@ fixing the problem. - Write a test program that calls stat() to search for EGD/PRNGd socket - rather than use the (non-portable) "test -S". + rather than use the (non-portable) "test -S". - More platforms for for setproctitle() emulation (testing needed) -- Handle changing passwords for the non-PAM expired password case - - Improve PAM support (a pam_lastlog module will cause sshd to exit) and maybe support alternate forms of authentications like OPIE via pam? @@ -70,7 +68,7 @@ to allow people to (right/wrongfully) link against Bind directly. - Consider splitting configure.ac into seperate files which do logically - similar tests. E.g move all the type detection stuff into one file, + similar tests. E.g move all the type detection stuff into one file, entropy related stuff into another. Packaging: @@ -86,7 +84,7 @@ + /dev/zero solution (Solaris) + No/broken MAP_ANON (Irix) + broken /dev/zero parse (Linux) -- PAM +- PAM + See above PAM notes - AIX + usrinfo() does not set TTY, but only required for legacy systems. Works @@ -96,4 +94,4 @@ - Cygwin + Privsep for Pre-auth only (no fd passing) -$Id: TODO,v 1.55 2003/06/11 13:56:41 dtucker Exp $ +$Id: TODO,v 1.57 2004/02/11 09:44:13 dtucker Exp $ diff -ru --new-file openssh-3.7.1p2/WARNING.RNG openssh-3.8p1/WARNING.RNG --- openssh-3.7.1p2/WARNING.RNG 2002-04-14 23:16:05.000000000 +1000 +++ openssh-3.8p1/WARNING.RNG 2003-11-21 23:48:55.000000000 +1100 @@ -44,16 +44,16 @@ The random number code will also read and save a seed file to ~/.ssh/prng_seed. This contents of this file are added to the random -number generator at startup. The goal here is to maintain as much +number generator at startup. The goal here is to maintain as much randomness between sessions as possible. The default entropy collection code has two main problems: 1. It is slow. -Executing each program in the list can take a large amount of time, -especially on slower machines. Additionally some program can take a -disproportionate time to execute. +Executing each program in the list can take a large amount of time, +especially on slower machines. Additionally some program can take a +disproportionate time to execute. Tuning the default entropy collection code is difficult at this point. It requires doing 'times ./ssh-rand-helper' and modifying the @@ -93,4 +93,4 @@ prngd/egd and configure OpenSSH using --with-prngd-port=xx or --with-prngd-socket=xx (refer to INSTALL for more information). -$Id: WARNING.RNG,v 1.5 2002/04/14 13:16:05 djm Exp $ +$Id: WARNING.RNG,v 1.6 2003/11/21 12:48:55 djm Exp $ diff -ru --new-file openssh-3.7.1p2/acconfig.h openssh-3.8p1/acconfig.h --- openssh-3.7.1p2/acconfig.h 2003-09-16 11:52:19.000000000 +1000 +++ openssh-3.8p1/acconfig.h 2004-02-06 16:24:31.000000000 +1100 @@ -1,4 +1,4 @@ -/* $Id: acconfig.h,v 1.166 2003/09/16 01:52:19 dtucker Exp $ */ +/* $Id: acconfig.h,v 1.173 2004/02/06 05:24:31 dtucker Exp $ */ /* * Copyright (c) 1999-2003 Damien Miller. All rights reserved. @@ -41,6 +41,12 @@ /* Define if your setregid() is broken */ #undef BROKEN_SETREGID +/* Define if your setresuid() is broken */ +#undef BROKEN_SETRESUID + +/* Define if your setresgid() is broken */ +#undef BROKEN_SETRESGID + /* Define to a Set Process Title type if your system is */ /* supported by bsd-setproctitle.c */ #undef SPT_TYPE @@ -59,6 +65,9 @@ /* from environment and PATH */ #undef LOGIN_PROGRAM_FALLBACK +/* Full path of your "passwd" program */ +#undef _PATH_PASSWD_PROG + /* Define if your password has a pw_class field */ #undef HAVE_PW_CLASS_IN_PASSWD @@ -89,6 +98,9 @@ /* Define if you have the getuserattr function. */ #undef HAVE_GETUSERATTR +/* Define if you have the basename function. */ +#undef HAVE_BASENAME + /* Work around problematic Linux PAM modules handling of PAM_TTY */ #undef PAM_TTY_KLUDGE @@ -247,6 +259,9 @@ /* Define this if you are using the Heimdal version of Kerberos V5 */ #undef HEIMDAL +/* Define this if you want to use libkafs' AFS support */ +#undef USE_AFS + /* Define if you want S/Key support */ #undef SKEY @@ -415,15 +430,15 @@ #undef LOCKED_PASSWD_PREFIX #undef LOCKED_PASSWD_SUBSTR -/* Define if DNS support is to be activated */ -#undef DNS - /* Define if getrrsetbyname() exists */ #undef HAVE_GETRRSETBYNAME /* Define if HEADER.ad exists in arpa/nameser.h */ #undef HAVE_HEADER_AD +/* Define if your resolver libs need this for getrrsetbyname */ +#undef BIND_8_COMPAT + @BOTTOM@ /* ******************* Shouldn't need to edit below this line ************** */ diff -ru --new-file openssh-3.7.1p2/acss.c openssh-3.8p1/acss.c --- openssh-3.7.1p2/acss.c 1970-01-01 10:00:00.000000000 +1000 +++ openssh-3.8p1/acss.c 2004-02-06 15:22:43.000000000 +1100 @@ -0,0 +1,264 @@ +/* $Id: acss.c,v 1.2 2004/02/06 04:22:43 dtucker Exp $ */ +/* + * Copyright (c) 2004 The OpenBSD project + * + * Permission to use, copy, modify, and distribute this software for any + * purpose with or without fee is hereby granted, provided that the above + * copyright notice and this permission notice appear in all copies. + * + * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES + * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR + * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES + * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN + * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF + * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. + */ + +#include "includes.h" +#include + +#if !defined(EVP_CTRL_SET_ACSS_MODE) && (OPENSSL_VERSION_NUMBER >= 0x00906000L) + +#include "acss.h" + +/* decryption sbox */ +static unsigned char sboxdec[] = { + 0x33, 0x73, 0x3b, 0x26, 0x63, 0x23, 0x6b, 0x76, + 0x3e, 0x7e, 0x36, 0x2b, 0x6e, 0x2e, 0x66, 0x7b, + 0xd3, 0x93, 0xdb, 0x06, 0x43, 0x03, 0x4b, 0x96, + 0xde, 0x9e, 0xd6, 0x0b, 0x4e, 0x0e, 0x46, 0x9b, + 0x57, 0x17, 0x5f, 0x82, 0xc7, 0x87, 0xcf, 0x12, + 0x5a, 0x1a, 0x52, 0x8f, 0xca, 0x8a, 0xc2, 0x1f, + 0xd9, 0x99, 0xd1, 0x00, 0x49, 0x09, 0x41, 0x90, + 0xd8, 0x98, 0xd0, 0x01, 0x48, 0x08, 0x40, 0x91, + 0x3d, 0x7d, 0x35, 0x24, 0x6d, 0x2d, 0x65, 0x74, + 0x3c, 0x7c, 0x34, 0x25, 0x6c, 0x2c, 0x64, 0x75, + 0xdd, 0x9d, 0xd5, 0x04, 0x4d, 0x0d, 0x45, 0x94, + 0xdc, 0x9c, 0xd4, 0x05, 0x4c, 0x0c, 0x44, 0x95, + 0x59, 0x19, 0x51, 0x80, 0xc9, 0x89, 0xc1, 0x10, + 0x58, 0x18, 0x50, 0x81, 0xc8, 0x88, 0xc0, 0x11, + 0xd7, 0x97, 0xdf, 0x02, 0x47, 0x07, 0x4f, 0x92, + 0xda, 0x9a, 0xd2, 0x0f, 0x4a, 0x0a, 0x42, 0x9f, + 0x53, 0x13, 0x5b, 0x86, 0xc3, 0x83, 0xcb, 0x16, + 0x5e, 0x1e, 0x56, 0x8b, 0xce, 0x8e, 0xc6, 0x1b, + 0xb3, 0xf3, 0xbb, 0xa6, 0xe3, 0xa3, 0xeb, 0xf6, + 0xbe, 0xfe, 0xb6, 0xab, 0xee, 0xae, 0xe6, 0xfb, + 0x37, 0x77, 0x3f, 0x22, 0x67, 0x27, 0x6f, 0x72, + 0x3a, 0x7a, 0x32, 0x2f, 0x6a, 0x2a, 0x62, 0x7f, + 0xb9, 0xf9, 0xb1, 0xa0, 0xe9, 0xa9, 0xe1, 0xf0, + 0xb8, 0xf8, 0xb0, 0xa1, 0xe8, 0xa8, 0xe0, 0xf1, + 0x5d, 0x1d, 0x55, 0x84, 0xcd, 0x8d, 0xc5, 0x14, + 0x5c, 0x1c, 0x54, 0x85, 0xcc, 0x8c, 0xc4, 0x15, + 0xbd, 0xfd, 0xb5, 0xa4, 0xed, 0xad, 0xe5, 0xf4, + 0xbc, 0xfc, 0xb4, 0xa5, 0xec, 0xac, 0xe4, 0xf5, + 0x39, 0x79, 0x31, 0x20, 0x69, 0x29, 0x61, 0x70, + 0x38, 0x78, 0x30, 0x21, 0x68, 0x28, 0x60, 0x71, + 0xb7, 0xf7, 0xbf, 0xa2, 0xe7, 0xa7, 0xef, 0xf2, + 0xba, 0xfa, 0xb2, 0xaf, 0xea, 0xaa, 0xe2, 0xff +}; + +/* encryption sbox */ +static unsigned char sboxenc[] = { + 0x33, 0x3b, 0x73, 0x15, 0x53, 0x5b, 0x13, 0x75, + 0x3d, 0x35, 0x7d, 0x1b, 0x5d, 0x55, 0x1d, 0x7b, + 0x67, 0x6f, 0x27, 0x81, 0xc7, 0xcf, 0x87, 0x21, + 0x69, 0x61, 0x29, 0x8f, 0xc9, 0xc1, 0x89, 0x2f, + 0xe3, 0xeb, 0xa3, 0x05, 0x43, 0x4b, 0x03, 0xa5, + 0xed, 0xe5, 0xad, 0x0b, 0x4d, 0x45, 0x0d, 0xab, + 0xea, 0xe2, 0xaa, 0x00, 0x4a, 0x42, 0x0a, 0xa0, + 0xe8, 0xe0, 0xa8, 0x02, 0x48, 0x40, 0x08, 0xa2, + 0x3e, 0x36, 0x7e, 0x14, 0x5e, 0x56, 0x1e, 0x74, + 0x3c, 0x34, 0x7c, 0x16, 0x5c, 0x54, 0x1c, 0x76, + 0x6a, 0x62, 0x2a, 0x80, 0xca, 0xc2, 0x8a, 0x20, + 0x68, 0x60, 0x28, 0x82, 0xc8, 0xc0, 0x88, 0x22, + 0xee, 0xe6, 0xae, 0x04, 0x4e, 0x46, 0x0e, 0xa4, + 0xec, 0xe4, 0xac, 0x06, 0x4c, 0x44, 0x0c, 0xa6, + 0xe7, 0xef, 0xa7, 0x01, 0x47, 0x4f, 0x07, 0xa1, + 0xe9, 0xe1, 0xa9, 0x0f, 0x49, 0x41, 0x09, 0xaf, + 0x63, 0x6b, 0x23, 0x85, 0xc3, 0xcb, 0x83, 0x25, + 0x6d, 0x65, 0x2d, 0x8b, 0xcd, 0xc5, 0x8d, 0x2b, + 0x37, 0x3f, 0x77, 0x11, 0x57, 0x5f, 0x17, 0x71, + 0x39, 0x31, 0x79, 0x1f, 0x59, 0x51, 0x19, 0x7f, + 0xb3, 0xbb, 0xf3, 0x95, 0xd3, 0xdb, 0x93, 0xf5, + 0xbd, 0xb5, 0xfd, 0x9b, 0xdd, 0xd5, 0x9d, 0xfb, + 0xba, 0xb2, 0xfa, 0x90, 0xda, 0xd2, 0x9a, 0xf0, + 0xb8, 0xb0, 0xf8, 0x92, 0xd8, 0xd0, 0x98, 0xf2, + 0x6e, 0x66, 0x2e, 0x84, 0xce, 0xc6, 0x8e, 0x24, + 0x6c, 0x64, 0x2c, 0x86, 0xcc, 0xc4, 0x8c, 0x26, + 0x3a, 0x32, 0x7a, 0x10, 0x5a, 0x52, 0x1a, 0x70, + 0x38, 0x30, 0x78, 0x12, 0x58, 0x50, 0x18, 0x72, + 0xbe, 0xb6, 0xfe, 0x94, 0xde, 0xd6, 0x9e, 0xf4, + 0xbc, 0xb4, 0xfc, 0x96, 0xdc, 0xd4, 0x9c, 0xf6, + 0xb7, 0xbf, 0xf7, 0x91, 0xd7, 0xdf, 0x97, 0xf1, + 0xb9, 0xb1, 0xf9, 0x9f, 0xd9, 0xd1, 0x99, 0xff +}; + +static unsigned char reverse[] = { + 0x00, 0x80, 0x40, 0xc0, 0x20, 0xa0, 0x60, 0xe0, + 0x10, 0x90, 0x50, 0xd0, 0x30, 0xb0, 0x70, 0xf0, + 0x08, 0x88, 0x48, 0xc8, 0x28, 0xa8, 0x68, 0xe8, + 0x18, 0x98, 0x58, 0xd8, 0x38, 0xb8, 0x78, 0xf8, + 0x04, 0x84, 0x44, 0xc4, 0x24, 0xa4, 0x64, 0xe4, + 0x14, 0x94, 0x54, 0xd4, 0x34, 0xb4, 0x74, 0xf4, + 0x0c, 0x8c, 0x4c, 0xcc, 0x2c, 0xac, 0x6c, 0xec, + 0x1c, 0x9c, 0x5c, 0xdc, 0x3c, 0xbc, 0x7c, 0xfc, + 0x02, 0x82, 0x42, 0xc2, 0x22, 0xa2, 0x62, 0xe2, + 0x12, 0x92, 0x52, 0xd2, 0x32, 0xb2, 0x72, 0xf2, + 0x0a, 0x8a, 0x4a, 0xca, 0x2a, 0xaa, 0x6a, 0xea, + 0x1a, 0x9a, 0x5a, 0xda, 0x3a, 0xba, 0x7a, 0xfa, + 0x06, 0x86, 0x46, 0xc6, 0x26, 0xa6, 0x66, 0xe6, + 0x16, 0x96, 0x56, 0xd6, 0x36, 0xb6, 0x76, 0xf6, + 0x0e, 0x8e, 0x4e, 0xce, 0x2e, 0xae, 0x6e, 0xee, + 0x1e, 0x9e, 0x5e, 0xde, 0x3e, 0xbe, 0x7e, 0xfe, + 0x01, 0x81, 0x41, 0xc1, 0x21, 0xa1, 0x61, 0xe1, + 0x11, 0x91, 0x51, 0xd1, 0x31, 0xb1, 0x71, 0xf1, + 0x09, 0x89, 0x49, 0xc9, 0x29, 0xa9, 0x69, 0xe9, + 0x19, 0x99, 0x59, 0xd9, 0x39, 0xb9, 0x79, 0xf9, + 0x05, 0x85, 0x45, 0xc5, 0x25, 0xa5, 0x65, 0xe5, + 0x15, 0x95, 0x55, 0xd5, 0x35, 0xb5, 0x75, 0xf5, + 0x0d, 0x8d, 0x4d, 0xcd, 0x2d, 0xad, 0x6d, 0xed, + 0x1d, 0x9d, 0x5d, 0xdd, 0x3d, 0xbd, 0x7d, 0xfd, + 0x03, 0x83, 0x43, 0xc3, 0x23, 0xa3, 0x63, 0xe3, + 0x13, 0x93, 0x53, 0xd3, 0x33, 0xb3, 0x73, 0xf3, + 0x0b, 0x8b, 0x4b, 0xcb, 0x2b, 0xab, 0x6b, 0xeb, + 0x1b, 0x9b, 0x5b, 0xdb, 0x3b, 0xbb, 0x7b, 0xfb, + 0x07, 0x87, 0x47, 0xc7, 0x27, 0xa7, 0x67, 0xe7, + 0x17, 0x97, 0x57, 0xd7, 0x37, 0xb7, 0x77, 0xf7, + 0x0f, 0x8f, 0x4f, 0xcf, 0x2f, 0xaf, 0x6f, 0xef, + 0x1f, 0x9f, 0x5f, 0xdf, 0x3f, 0xbf, 0x7f, 0xff +}; + +/* + * Two linear feedback shift registers are used: + * + * lfsr17: polynomial of degree 17, primitive modulo 2 (listed in Schneier) + * x^15 + x + 1 + * lfsr25: polynomial of degree 25, not know if primitive modulo 2 + * x^13 + x^5 + x^4 + x^1 + 1 + * + * Output bits are discarded, instead the feedback bits are added to produce + * the cipher stream. Depending on the mode, feedback bytes may be inverted + * bit-wise before addition. + * + * The lfsrs are seeded with bytes from the raw key: + * + * lfsr17: byte 0[0:7] at bit 9 + * byte 1[0:7] at bit 0 + * + * lfsr25: byte 2[0:4] at bit 16 + * byte 2[5:7] at bit 22 + * byte 3[0:7] at bit 8 + * byte 4[0:7] at bit 0 + * + * To prevent 0 cycles, 1's are inject at bit 8 in lfrs17 and bit 21 in + * lfsr25. + * + */ + +int +acss(ACSS_KEY *key, unsigned long len, const unsigned char *in, + unsigned char *out) +{ + unsigned long i; + unsigned long lfsr17tmp, lfsr25tmp, lfsrsumtmp; + + lfsrsumtmp = lfsr17tmp = lfsr25tmp = 0; + + /* keystream is sum of lfsrs */ + for (i = 0; i < len; i++) { + lfsr17tmp = key->lfsr17 ^ (key->lfsr17 >> 14); + key->lfsr17 = (key->lfsr17 >> 8) + ^ (lfsr17tmp << 9) + ^ (lfsr17tmp << 12) + ^ (lfsr17tmp << 15); + key->lfsr17 &= 0x1ffff; /* 17 bit LFSR */ + + lfsr25tmp = key->lfsr25 + ^ (key->lfsr25 >> 3) + ^ (key->lfsr25 >> 4) + ^ (key->lfsr25 >> 12); + key->lfsr25 = (key->lfsr25 >> 8) ^ (lfsr25tmp << 17); + key->lfsr25 &= 0x1ffffff; /* 25 bit LFSR */ + + lfsrsumtmp = key->lfsrsum; + + /* addition */ + switch (key->mode) { + case ACSS_AUTHENTICATE: + case ACSS_DATA: + key->lfsrsum = 0xff & ~(key->lfsr17 >> 9); + key->lfsrsum += key->lfsr25 >> 17; + break; + case ACSS_SESSIONKEY: + key->lfsrsum = key->lfsr17 >> 9; + key->lfsrsum += key->lfsr25 >> 17; + break; + case ACSS_TITLEKEY: + key->lfsrsum = key->lfsr17 >> 9; + key->lfsrsum += 0xff & ~(key->lfsr25 >> 17); + break; + default: + return 1; + } + key->lfsrsum += (lfsrsumtmp >> 8); + + if (key->encrypt) { + out[i] = sboxenc[(in[i] ^ key->lfsrsum) & 0xff]; + } else { + out[i] = (sboxdec[in[i]] ^ key->lfsrsum) & 0xff; + } + } + + return 0; +} + +static void +acss_seed(ACSS_KEY *key) +{ + int i; + + /* if available, mangle with subkey */ + if (key->subkey_avilable) { + for (i = 0; i < ACSS_KEYSIZE; i++) + key->seed[i] = reverse[key->data[i] ^ key->subkey[i]]; + } else { + for (i = 0; i < ACSS_KEYSIZE; i++) + key->seed[i] = reverse[key->data[i]]; + } + + /* seed lfsrs */ + key->lfsr17 = key->seed[1] + | (key->seed[0] << 9) + | (1 << 8); /* inject 1 at bit 9 */ + key->lfsr25 = key->seed[4] + | (key->seed[3] << 8) + | ((key->seed[2] & 0x1f) << 16) + | ((key->seed[2] & 0xe0) << 17) + | (1 << 21); /* inject 1 at bit 22 */ + + key->lfsrsum = 0; +} + +void +acss_setkey(ACSS_KEY *key, const unsigned char *data, int enc, int mode) +{ + memcpy(key->data, data, sizeof(key->data)); + memset(key->subkey, 0, sizeof(key->subkey)); + + if (enc != -1) + key->encrypt = enc; + key->mode = mode; + key->subkey_avilable = 0; + + acss_seed(key); +} + +void +acss_setsubkey(ACSS_KEY *key, const unsigned char *subkey) +{ + memcpy(key->subkey, subkey, sizeof(key->subkey)); + key->subkey_avilable = 1; + acss_seed(key); +} +#endif diff -ru --new-file openssh-3.7.1p2/acss.h openssh-3.8p1/acss.h --- openssh-3.7.1p2/acss.h 1970-01-01 10:00:00.000000000 +1000 +++ openssh-3.8p1/acss.h 2004-02-06 15:22:43.000000000 +1100 @@ -0,0 +1,47 @@ +/* $Id: acss.h,v 1.2 2004/02/06 04:22:43 dtucker Exp $ */ +/* + * Copyright (c) 2004 The OpenBSD project + * + * Permission to use, copy, modify, and distribute this software for any + * purpose with or without fee is hereby granted, provided that the above + * copyright notice and this permission notice appear in all copies. + * + * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES + * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR + * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES + * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN + * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF + * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. + */ + +#ifndef _ACSS_H_ +#define _ACSS_H_ + +/* 40bit key */ +#define ACSS_KEYSIZE 5 + +/* modes of acss */ +#define ACSS_AUTHENTICATE 0 +#define ACSS_SESSIONKEY 1 +#define ACSS_TITLEKEY 2 +#define ACSS_DATA 3 + +typedef struct acss_key_st { + unsigned int lfsr17; /* current state of lfsrs */ + unsigned int lfsr25; + unsigned int lfsrsum; + unsigned char seed[ACSS_KEYSIZE]; + unsigned char data[ACSS_KEYSIZE]; + unsigned char subkey[ACSS_KEYSIZE]; + int encrypt; /* XXX make these bit flags? */ + int mode; + int seeded; + int subkey_avilable; +} ACSS_KEY; + +void acss_setkey(ACSS_KEY *, const unsigned char *, int, int); +void acss_setsubkey(ACSS_KEY *, const unsigned char *); +int acss(ACSS_KEY *, unsigned long, const unsigned char *, unsigned char *); + +#endif /* ifndef _ACSS_H_ */ Binary files openssh-3.7.1p2/atomicio.o and openssh-3.8p1/atomicio.o differ Binary files openssh-3.7.1p2/auth-bsdauth.o and openssh-3.8p1/auth-bsdauth.o differ diff -ru --new-file openssh-3.7.1p2/auth-chall.c openssh-3.8p1/auth-chall.c --- openssh-3.7.1p2/auth-chall.c 2003-09-23 19:24:21.000000000 +1000 +++ openssh-3.8p1/auth-chall.c 2003-11-21 23:48:55.000000000 +1100 @@ -23,7 +23,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: auth-chall.c,v 1.8 2001/05/18 14:13:28 markus Exp $"); +RCSID("$OpenBSD: auth-chall.c,v 1.9 2003/11/03 09:03:37 djm Exp $"); #include "auth.h" #include "log.h" @@ -67,36 +67,38 @@ int verify_response(Authctxt *authctxt, const char *response) { - char *resp[1]; - int res; + char *resp[1], *name, *info, **prompts; + u_int i, numprompts, *echo_on; + int authenticated = 0; if (device == NULL) return 0; if (authctxt->kbdintctxt == NULL) return 0; resp[0] = (char *)response; - res = device->respond(authctxt->kbdintctxt, 1, resp); - if (res == 1) { - /* postponed - send a null query just in case */ - char *name, *info, **prompts; - u_int i, numprompts, *echo_on; - - res = device->query(authctxt->kbdintctxt, &name, &info, - &numprompts, &prompts, &echo_on); - if (res == 0) { - for (i = 0; i < numprompts; i++) - xfree(prompts[i]); - xfree(prompts); - xfree(name); - xfree(echo_on); - xfree(info); - } - /* if we received more prompts, we're screwed */ - res = (res == 0 && numprompts == 0) ? 0 : -1; + switch (device->respond(authctxt->kbdintctxt, 1, resp)) { + case 0: /* Success */ + authenticated = 1; + break; + case 1: /* Postponed - retry with empty query for PAM */ + if ((device->query(authctxt->kbdintctxt, &name, &info, + &numprompts, &prompts, &echo_on)) != 0) + break; + if (numprompts == 0 && + device->respond(authctxt->kbdintctxt, 0, resp) == 0) + authenticated = 1; + + for (i = 0; i < numprompts; i++) + xfree(prompts[i]); + xfree(prompts); + xfree(name); + xfree(echo_on); + xfree(info); + break; } device->free_ctx(authctxt->kbdintctxt); authctxt->kbdintctxt = NULL; - return res ? 0 : 1; + return authenticated; } void abandon_challenge_response(Authctxt *authctxt) Binary files openssh-3.7.1p2/auth-chall.o and openssh-3.8p1/auth-chall.o differ diff -ru --new-file openssh-3.7.1p2/auth-krb5.c openssh-3.8p1/auth-krb5.c --- openssh-3.7.1p2/auth-krb5.c 2003-09-02 22:51:17.000000000 +1000 +++ openssh-3.8p1/auth-krb5.c 2003-11-22 12:11:06.000000000 +1100 @@ -28,7 +28,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: auth-krb5.c,v 1.12 2003/08/28 12:54:34 markus Exp $"); +RCSID("$OpenBSD: auth-krb5.c,v 1.15 2003/11/21 11:57:02 djm Exp $"); #include "ssh.h" #include "ssh1.h" @@ -40,7 +40,6 @@ #include "auth.h" #ifdef KRB5 - #include extern ServerOptions options; @@ -50,7 +49,6 @@ { Authctxt *authctxt = (Authctxt *)context; krb5_error_code problem; - static int cleanup_registered = 0; if (authctxt->krb5_ctx == NULL) { problem = krb5_init_context(&authctxt->krb5_ctx); @@ -58,10 +56,6 @@ return (problem); krb5_init_ets(authctxt->krb5_ctx); } - if (!cleanup_registered) { - fatal_add_cleanup(krb5_cleanup_proc, authctxt); - cleanup_registered = 1; - } return (0); } @@ -73,11 +67,11 @@ krb5_principal server; char ccname[40]; int tmpfd; -#endif +#endif krb5_error_code problem; krb5_ccache ccache = NULL; - if (authctxt->pw == NULL) + if (!authctxt->valid) return (0); temporarily_use_uid(authctxt->pw); @@ -102,14 +96,15 @@ goto out; restore_uid(); - + problem = krb5_verify_user(authctxt->krb5_ctx, authctxt->krb5_user, ccache, password, 1, NULL); - + temporarily_use_uid(authctxt->pw); if (problem) goto out; + problem = krb5_cc_gen_new(authctxt->krb5_ctx, &krb5_fcc_ops, &authctxt->krb5_fwd_ccache); if (problem) @@ -140,21 +135,21 @@ temporarily_use_uid(authctxt->pw); if (problem) goto out; - - if (!krb5_kuserok(authctxt->krb5_ctx, authctxt->krb5_user, + + if (!krb5_kuserok(authctxt->krb5_ctx, authctxt->krb5_user, authctxt->pw->pw_name)) { problem = -1; goto out; - } + } snprintf(ccname,sizeof(ccname),"FILE:/tmp/krb5cc_%d_XXXXXX",geteuid()); - + if ((tmpfd = mkstemp(ccname+strlen("FILE:")))==-1) { logit("mkstemp(): %.100s", strerror(errno)); problem = errno; goto out; } - + if (fchmod(tmpfd,S_IRUSR | S_IWUSR) == -1) { logit("fchmod(): %.100s", strerror(errno)); close(tmpfd); @@ -171,12 +166,12 @@ authctxt->krb5_user); if (problem) goto out; - + problem= krb5_cc_store_cred(authctxt->krb5_ctx, authctxt->krb5_fwd_ccache, &creds); if (problem) goto out; -#endif +#endif authctxt->krb5_ticket_file = (char *)krb5_cc_get_name(authctxt->krb5_ctx, authctxt->krb5_fwd_ccache); @@ -205,10 +200,8 @@ } void -krb5_cleanup_proc(void *context) +krb5_cleanup_proc(Authctxt *authctxt) { - Authctxt *authctxt = (Authctxt *)context; - debug("krb5_cleanup_proc called"); if (authctxt->krb5_fwd_ccache) { krb5_cc_destroy(authctxt->krb5_ctx, authctxt->krb5_fwd_ccache); Binary files openssh-3.7.1p2/auth-krb5.o and openssh-3.8p1/auth-krb5.o differ Binary files openssh-3.7.1p2/auth-options.o and openssh-3.8p1/auth-options.o differ diff -ru --new-file openssh-3.7.1p2/auth-pam.c openssh-3.8p1/auth-pam.c --- openssh-3.7.1p2/auth-pam.c 2003-09-23 19:24:21.000000000 +1000 +++ openssh-3.8p1/auth-pam.c 2004-02-17 23:20:08.000000000 +1100 @@ -31,10 +31,14 @@ /* Based on $FreeBSD: src/crypto/openssh/auth2-pam-freebsd.c,v 1.11 2003/03/31 13:48:18 des Exp $ */ #include "includes.h" -RCSID("$Id: auth-pam.c,v 1.72.2.2 2003/09/23 09:24:21 djm Exp $"); +RCSID("$Id: auth-pam.c,v 1.95 2004/02/17 12:20:08 dtucker Exp $"); #ifdef USE_PAM +#if defined(HAVE_SECURITY_PAM_APPL_H) #include +#elif defined (HAVE_PAM_PAM_APPL_H) +#include +#endif #include "auth.h" #include "auth-pam.h" @@ -52,22 +56,54 @@ #include "auth-options.h" extern ServerOptions options; - -#define __unused +extern Buffer loginmsg; +extern int compat20; #ifdef USE_POSIX_THREADS #include /* - * Avoid namespace clash when *not* using pthreads for systems *with* - * pthreads, which unconditionally define pthread_t via sys/types.h + * Avoid namespace clash when *not* using pthreads for systems *with* + * pthreads, which unconditionally define pthread_t via sys/types.h * (e.g. Linux) */ -typedef pthread_t sp_pthread_t; +typedef pthread_t sp_pthread_t; #else +typedef pid_t sp_pthread_t; +#endif + +struct pam_ctxt { + sp_pthread_t pam_thread; + int pam_psock; + int pam_csock; + int pam_done; +}; + +static void sshpam_free_ctx(void *); +static struct pam_ctxt *cleanup_ctxt; + +#ifndef USE_POSIX_THREADS /* * Simulate threads with processes. */ -typedef pid_t sp_pthread_t; + +static int sshpam_thread_status = -1; +static mysig_t sshpam_oldsig; + +static void +sshpam_sigchld_handler(int sig) +{ + if (cleanup_ctxt == NULL) + return; /* handler called after PAM cleanup, shouldn't happen */ + if (waitpid(cleanup_ctxt->pam_thread, &sshpam_thread_status, 0) == -1) + return; /* couldn't wait for process */ + if (WIFSIGNALED(sshpam_thread_status) && + WTERMSIG(sshpam_thread_status) == SIGTERM) + return; /* terminated by pthread_cancel */ + if (!WIFEXITED(sshpam_thread_status)) + fatal("PAM: authentication thread exited unexpectedly"); + if (WEXITSTATUS(sshpam_thread_status) != 0) + fatal("PAM: authentication thread exited uncleanly"); +} static void pthread_exit(void *value __unused) @@ -90,6 +126,7 @@ _exit(1); default: *thread = pid; + sshpam_oldsig = signal(SIGCHLD, sshpam_sigchld_handler); return (0); } } @@ -97,6 +134,7 @@ static int pthread_cancel(sp_pthread_t thread) { + signal(SIGCHLD, sshpam_oldsig); return (kill(thread, SIGTERM)); } @@ -105,6 +143,9 @@ { int status; + if (sshpam_thread_status != -1) + return (sshpam_thread_status); + signal(SIGCHLD, sshpam_oldsig); waitpid(thread, &status, 0); return (status); } @@ -114,18 +155,80 @@ static pam_handle_t *sshpam_handle = NULL; static int sshpam_err = 0; static int sshpam_authenticated = 0; -static int sshpam_new_authtok_reqd = 0; static int sshpam_session_open = 0; static int sshpam_cred_established = 0; +static int sshpam_account_status = -1; +static char **sshpam_env = NULL; +static int *force_pwchange; + +/* Some PAM implementations don't implement this */ +#ifndef HAVE_PAM_GETENVLIST +static char ** +pam_getenvlist(pam_handle_t *pamh) +{ + /* + * XXX - If necessary, we can still support envrionment passing + * for platforms without pam_getenvlist by searching for known + * env vars (e.g. KRB5CCNAME) from the PAM environment. + */ + return NULL; +} +#endif -struct pam_ctxt { - sp_pthread_t pam_thread; - int pam_psock; - int pam_csock; - int pam_done; -}; +void +pam_password_change_required(int reqd) +{ + debug3("%s %d", __func__, reqd); + *force_pwchange = reqd; + if (reqd) { + no_port_forwarding_flag |= 2; + no_agent_forwarding_flag |= 2; + no_x11_forwarding_flag |= 2; + } else { + no_port_forwarding_flag &= ~2; + no_agent_forwarding_flag &= ~2; + no_x11_forwarding_flag &= ~2; + } +} -static void sshpam_free_ctx(void *); +/* Import regular and PAM environment from subprocess */ +static void +import_environments(Buffer *b) +{ + char *env; + u_int i, num_env; + int err; + + debug3("PAM: %s entering", __func__); + + /* Import variables set by do_pam_account */ + sshpam_account_status = buffer_get_int(b); + pam_password_change_required(buffer_get_int(b)); + + /* Import environment from subprocess */ + num_env = buffer_get_int(b); + sshpam_env = xmalloc((num_env + 1) * sizeof(*sshpam_env)); + debug3("PAM: num env strings %d", num_env); + for(i = 0; i < num_env; i++) + sshpam_env[i] = buffer_get_string(b, NULL); + + sshpam_env[num_env] = NULL; + + /* Import PAM environment from subprocess */ + num_env = buffer_get_int(b); + debug("PAM: num PAM env strings %d", num_env); + for(i = 0; i < num_env; i++) { + env = buffer_get_string(b, NULL); + +#ifdef HAVE_PAM_PUTENV + /* Errors are not fatal here */ + if ((err = pam_putenv(sshpam_handle, env)) != PAM_SUCCESS) { + error("PAM: pam_putenv: %s", + pam_strerror(sshpam_handle, sshpam_err)); + } +#endif + } +} /* * Conversation function for authentication thread. @@ -139,6 +242,7 @@ struct pam_response *reply; int i; + debug3("PAM: %s entering, %d messages", __func__, n); *resp = NULL; ctxt = data; @@ -153,36 +257,42 @@ for (i = 0; i < n; ++i) { switch (PAM_MSG_MEMBER(msg, i, msg_style)) { case PAM_PROMPT_ECHO_OFF: - buffer_put_cstring(&buffer, + buffer_put_cstring(&buffer, PAM_MSG_MEMBER(msg, i, msg)); - ssh_msg_send(ctxt->pam_csock, - PAM_MSG_MEMBER(msg, i, msg_style), &buffer); - ssh_msg_recv(ctxt->pam_csock, &buffer); + if (ssh_msg_send(ctxt->pam_csock, + PAM_MSG_MEMBER(msg, i, msg_style), &buffer) == -1) + goto fail; + if (ssh_msg_recv(ctxt->pam_csock, &buffer) == -1) + goto fail; if (buffer_get_char(&buffer) != PAM_AUTHTOK) goto fail; reply[i].resp = buffer_get_string(&buffer, NULL); break; case PAM_PROMPT_ECHO_ON: - buffer_put_cstring(&buffer, + buffer_put_cstring(&buffer, PAM_MSG_MEMBER(msg, i, msg)); - ssh_msg_send(ctxt->pam_csock, - PAM_MSG_MEMBER(msg, i, msg_style), &buffer); - ssh_msg_recv(ctxt->pam_csock, &buffer); + if (ssh_msg_send(ctxt->pam_csock, + PAM_MSG_MEMBER(msg, i, msg_style), &buffer) == -1) + goto fail; + if (ssh_msg_recv(ctxt->pam_csock, &buffer) == -1) + goto fail; if (buffer_get_char(&buffer) != PAM_AUTHTOK) goto fail; reply[i].resp = buffer_get_string(&buffer, NULL); break; case PAM_ERROR_MSG: - buffer_put_cstring(&buffer, + buffer_put_cstring(&buffer, PAM_MSG_MEMBER(msg, i, msg)); - ssh_msg_send(ctxt->pam_csock, - PAM_MSG_MEMBER(msg, i, msg_style), &buffer); + if (ssh_msg_send(ctxt->pam_csock, + PAM_MSG_MEMBER(msg, i, msg_style), &buffer) == -1) + goto fail; break; case PAM_TEXT_INFO: - buffer_put_cstring(&buffer, + buffer_put_cstring(&buffer, PAM_MSG_MEMBER(msg, i, msg)); - ssh_msg_send(ctxt->pam_csock, - PAM_MSG_MEMBER(msg, i, msg_style), &buffer); + if (ssh_msg_send(ctxt->pam_csock, + PAM_MSG_MEMBER(msg, i, msg_style), &buffer) == -1) + goto fail; break; default: goto fail; @@ -213,10 +323,14 @@ Buffer buffer; struct pam_conv sshpam_conv; #ifndef USE_POSIX_THREADS + extern char **environ; + char **env_from_pam; + u_int i; const char *pam_user; pam_get_item(sshpam_handle, PAM_USER, (const void **)&pam_user); setproctitle("%s [pam]", pam_user); + environ[0] = NULL; #endif sshpam_conv.conv = sshpam_thread_conv; @@ -230,7 +344,43 @@ sshpam_err = pam_authenticate(sshpam_handle, 0); if (sshpam_err != PAM_SUCCESS) goto auth_fail; + + if (compat20) { + if (!do_pam_account()) + goto auth_fail; + if (*force_pwchange) { + sshpam_err = pam_chauthtok(sshpam_handle, + PAM_CHANGE_EXPIRED_AUTHTOK); + if (sshpam_err != PAM_SUCCESS) + goto auth_fail; + pam_password_change_required(0); + } + } + buffer_put_cstring(&buffer, "OK"); + +#ifndef USE_POSIX_THREADS + /* Export variables set by do_pam_account */ + buffer_put_int(&buffer, sshpam_account_status); + buffer_put_int(&buffer, *force_pwchange); + + /* Export any environment strings set in child */ + for(i = 0; environ[i] != NULL; i++) + ; /* Count */ + buffer_put_int(&buffer, i); + for(i = 0; environ[i] != NULL; i++) + buffer_put_cstring(&buffer, environ[i]); + + /* Export any environment strings set by PAM in child */ + env_from_pam = pam_getenvlist(sshpam_handle); + for(i = 0; env_from_pam != NULL && env_from_pam[i] != NULL; i++) + ; /* Count */ + buffer_put_int(&buffer, i); + for(i = 0; env_from_pam != NULL && env_from_pam[i] != NULL; i++) + buffer_put_cstring(&buffer, env_from_pam[i]); +#endif /* USE_POSIX_THREADS */ + + /* XXX - can't do much about an error here */ ssh_msg_send(ctxt->pam_csock, sshpam_err, &buffer); buffer_free(&buffer); pthread_exit(NULL); @@ -238,37 +388,43 @@ auth_fail: buffer_put_cstring(&buffer, pam_strerror(sshpam_handle, sshpam_err)); + /* XXX - can't do much about an error here */ ssh_msg_send(ctxt->pam_csock, PAM_AUTH_ERR, &buffer); buffer_free(&buffer); pthread_exit(NULL); - + return (NULL); /* Avoid warning for non-pthread case */ } -static void -sshpam_thread_cleanup(void *ctxtp) +void +sshpam_thread_cleanup(void) { - struct pam_ctxt *ctxt = ctxtp; + struct pam_ctxt *ctxt = cleanup_ctxt; - pthread_cancel(ctxt->pam_thread); - pthread_join(ctxt->pam_thread, NULL); - close(ctxt->pam_psock); - close(ctxt->pam_csock); + debug3("PAM: %s entering", __func__); + if (ctxt != NULL && ctxt->pam_thread != 0) { + pthread_cancel(ctxt->pam_thread); + pthread_join(ctxt->pam_thread, NULL); + close(ctxt->pam_psock); + close(ctxt->pam_csock); + memset(ctxt, 0, sizeof(*ctxt)); + cleanup_ctxt = NULL; + } } static int sshpam_null_conv(int n, const struct pam_message **msg, struct pam_response **resp, void *data) { + debug3("PAM: %s entering, %d messages", __func__, n); return (PAM_CONV_ERR); } static struct pam_conv null_conv = { sshpam_null_conv, NULL }; -static void -sshpam_cleanup(void *arg) +void +sshpam_cleanup(void) { - (void)arg; debug("PAM: cleanup"); if (sshpam_handle == NULL) return; @@ -281,7 +437,7 @@ pam_close_session(sshpam_handle, PAM_SILENT); sshpam_session_open = 0; } - sshpam_authenticated = sshpam_new_authtok_reqd = 0; + sshpam_authenticated = 0; pam_end(sshpam_handle, sshpam_err); sshpam_handle = NULL; } @@ -299,7 +455,6 @@ PAM_USER, (const void **)&pam_user); if (sshpam_err == PAM_SUCCESS && strcmp(user, pam_user) == 0) return (0); - fatal_remove_cleanup(sshpam_cleanup, NULL); pam_end(sshpam_handle, sshpam_err); sshpam_handle = NULL; } @@ -320,11 +475,11 @@ return (-1); } #ifdef PAM_TTY_KLUDGE - /* - * Some silly PAM modules (e.g. pam_time) require a TTY to operate. - * sshd doesn't set the tty until too late in the auth process and + /* + * Some silly PAM modules (e.g. pam_time) require a TTY to operate. + * sshd doesn't set the tty until too late in the auth process and * may not even set one (for tty-less connections) - */ + */ debug("PAM: setting PAM_TTY to \"ssh\""); sshpam_err = pam_set_item(sshpam_handle, PAM_TTY, "ssh"); if (sshpam_err != PAM_SUCCESS) { @@ -333,7 +488,6 @@ return (-1); } #endif - fatal_add_cleanup(sshpam_cleanup, NULL); return (0); } @@ -343,6 +497,7 @@ struct pam_ctxt *ctxt; int socks[2]; + debug3("PAM: %s entering", __func__); /* Refuse to start if we don't have PAM enabled */ if (!options.use_pam) return NULL; @@ -354,7 +509,9 @@ } ctxt = xmalloc(sizeof *ctxt); - ctxt->pam_done = 0; + memset(ctxt, 0, sizeof(*ctxt)); + + force_pwchange = &(authctxt->force_pwchange); /* Start the authentication thread */ if (socketpair(AF_UNIX, SOCK_STREAM, PF_UNSPEC, socks) == -1) { @@ -372,7 +529,7 @@ xfree(ctxt); return (NULL); } - fatal_add_cleanup(sshpam_thread_cleanup, ctxt); + cleanup_ctxt = ctxt; return (ctxt); } @@ -387,6 +544,7 @@ char *msg; size_t len; + debug3("PAM: %s entering", __func__); buffer_init(&buffer); *name = xstrdup(""); *info = xstrdup(""); @@ -410,26 +568,23 @@ case PAM_ERROR_MSG: case PAM_TEXT_INFO: /* accumulate messages */ - len = plen + strlen(msg) + 1; + len = plen + strlen(msg) + 2; **prompts = xrealloc(**prompts, len); - plen += snprintf(**prompts + plen, len, "%s", msg); + plen += snprintf(**prompts + plen, len, "%s\n", msg); xfree(msg); break; case PAM_SUCCESS: case PAM_AUTH_ERR: if (**prompts != NULL) { /* drain any accumulated messages */ -#if 0 /* XXX - not compatible with privsep */ - packet_start(SSH2_MSG_USERAUTH_BANNER); - packet_put_cstring(**prompts); - packet_put_cstring(""); - packet_send(); - packet_write_wait(); -#endif + debug("PAM: %s", **prompts); + buffer_append(&loginmsg, **prompts, + strlen(**prompts)); xfree(**prompts); **prompts = NULL; } if (type == PAM_SUCCESS) { + import_environments(&buffer); *num = 0; **echo_on = 0; ctxt->pam_done = 1; @@ -437,6 +592,7 @@ return (0); } error("PAM: %s", msg); + /* FALLTHROUGH */ default: *num = 0; **echo_on = 0; @@ -455,7 +611,7 @@ Buffer buffer; struct pam_ctxt *ctxt = ctx; - debug2("PAM: %s", __func__); + debug2("PAM: %s entering, %d responses", __func__, num); switch (ctxt->pam_done) { case 1: sshpam_authenticated = 1; @@ -471,7 +627,10 @@ } buffer_init(&buffer); buffer_put_cstring(&buffer, *resp); - ssh_msg_send(ctxt->pam_psock, PAM_AUTHTOK, &buffer); + if (ssh_msg_send(ctxt->pam_psock, PAM_AUTHTOK, &buffer) == -1) { + buffer_free(&buffer); + return (-1); + } buffer_free(&buffer); return (1); } @@ -481,8 +640,8 @@ { struct pam_ctxt *ctxt = ctxtp; - fatal_remove_cleanup(sshpam_thread_cleanup, ctxt); - sshpam_thread_cleanup(ctxtp); + debug3("PAM: %s entering", __func__); + sshpam_thread_cleanup(); xfree(ctxt); /* * We don't call sshpam_cleanup() here because we may need the PAM @@ -524,44 +683,28 @@ void finish_pam(void) { - fatal_remove_cleanup(sshpam_cleanup, NULL); - sshpam_cleanup(NULL); + sshpam_cleanup(); } u_int do_pam_account(void) { + if (sshpam_account_status != -1) + return (sshpam_account_status); + sshpam_err = pam_acct_mgmt(sshpam_handle, 0); - debug3("%s: pam_acct_mgmt = %d", __func__, sshpam_err); + debug3("PAM: %s pam_acct_mgmt = %d", __func__, sshpam_err); - if (sshpam_err != PAM_SUCCESS && sshpam_err != PAM_NEW_AUTHTOK_REQD) - return (0); - - if (sshpam_err == PAM_NEW_AUTHTOK_REQD) { - sshpam_new_authtok_reqd = 1; - - /* Prevent forwardings until password changed */ - no_port_forwarding_flag |= 2; - no_agent_forwarding_flag |= 2; - no_x11_forwarding_flag |= 2; + if (sshpam_err != PAM_SUCCESS && sshpam_err != PAM_NEW_AUTHTOK_REQD) { + sshpam_account_status = 0; + return (sshpam_account_status); } - return (1); -} + if (sshpam_err == PAM_NEW_AUTHTOK_REQD) + pam_password_change_required(1); -void -do_pam_session(void) -{ - sshpam_err = pam_set_item(sshpam_handle, PAM_CONV, - (const void *)&null_conv); - if (sshpam_err != PAM_SUCCESS) - fatal("PAM: failed to set PAM_CONV: %s", - pam_strerror(sshpam_handle, sshpam_err)); - sshpam_err = pam_open_session(sshpam_handle, 0); - if (sshpam_err != PAM_SUCCESS) - fatal("PAM: pam_open_session(): %s", - pam_strerror(sshpam_handle, sshpam_err)); - sshpam_session_open = 1; + sshpam_account_status = 1; + return (sshpam_account_status); } void @@ -603,23 +746,19 @@ pam_strerror(sshpam_handle, sshpam_err)); } -int -is_pam_password_change_required(void) -{ - return (sshpam_new_authtok_reqd); -} - static int -pam_chauthtok_conv(int n, const struct pam_message **msg, +pam_tty_conv(int n, const struct pam_message **msg, struct pam_response **resp, void *data) { char input[PAM_MAX_MSG_SIZE]; struct pam_response *reply; int i; + debug3("PAM: %s called with %d messages", __func__, n); + *resp = NULL; - if (n <= 0 || n > PAM_MAX_NUM_MSG) + if (n <= 0 || n > PAM_MAX_NUM_MSG || !isatty(STDIN_FILENO)) return (PAM_CONV_ERR); if ((reply = malloc(n * sizeof(*reply))) == NULL) @@ -630,19 +769,19 @@ switch (PAM_MSG_MEMBER(msg, i, msg_style)) { case PAM_PROMPT_ECHO_OFF: reply[i].resp = - read_passphrase(PAM_MSG_MEMBER(msg, i, msg), + read_passphrase(PAM_MSG_MEMBER(msg, i, msg), RP_ALLOW_STDIN); reply[i].resp_retcode = PAM_SUCCESS; break; case PAM_PROMPT_ECHO_ON: - fputs(PAM_MSG_MEMBER(msg, i, msg), stderr); + fprintf(stderr, "%s\n", PAM_MSG_MEMBER(msg, i, msg)); fgets(input, sizeof input, stdin); reply[i].resp = xstrdup(input); reply[i].resp_retcode = PAM_SUCCESS; break; case PAM_ERROR_MSG: case PAM_TEXT_INFO: - fputs(PAM_MSG_MEMBER(msg, i, msg), stderr); + fprintf(stderr, "%s\n", PAM_MSG_MEMBER(msg, i, msg)); reply[i].resp_retcode = PAM_SUCCESS; break; default: @@ -661,6 +800,8 @@ return (PAM_CONV_ERR); } +static struct pam_conv tty_conv = { pam_tty_conv, NULL }; + /* * XXX this should be done in the authentication phase, but ssh1 doesn't * support that @@ -668,15 +809,10 @@ void do_pam_chauthtok(void) { - struct pam_conv pam_conv; - - pam_conv.conv = pam_chauthtok_conv; - pam_conv.appdata_ptr = NULL; - if (use_privsep) fatal("Password expired (unable to change with privsep)"); sshpam_err = pam_set_item(sshpam_handle, PAM_CONV, - (const void *)&pam_conv); + (const void *)&tty_conv); if (sshpam_err != PAM_SUCCESS) fatal("PAM: failed to set PAM_CONV: %s", pam_strerror(sshpam_handle, sshpam_err)); @@ -687,17 +823,77 @@ pam_strerror(sshpam_handle, sshpam_err)); } -/* +static int +pam_store_conv(int n, const struct pam_message **msg, + struct pam_response **resp, void *data) +{ + struct pam_response *reply; + int i; + size_t len; + + debug3("PAM: %s called with %d messages", __func__, n); + *resp = NULL; + + if (n <= 0 || n > PAM_MAX_NUM_MSG) + return (PAM_CONV_ERR); + + if ((reply = malloc(n * sizeof(*reply))) == NULL) + return (PAM_CONV_ERR); + memset(reply, 0, n * sizeof(*reply)); + + for (i = 0; i < n; ++i) { + switch (PAM_MSG_MEMBER(msg, i, msg_style)) { + case PAM_ERROR_MSG: + case PAM_TEXT_INFO: + len = strlen(PAM_MSG_MEMBER(msg, i, msg)); + buffer_append(&loginmsg, PAM_MSG_MEMBER(msg, i, msg), len); + buffer_append(&loginmsg, "\n", 1 ); + reply[i].resp_retcode = PAM_SUCCESS; + break; + default: + goto fail; + } + } + *resp = reply; + return (PAM_SUCCESS); + + fail: + for(i = 0; i < n; i++) { + if (reply[i].resp != NULL) + xfree(reply[i].resp); + } + xfree(reply); + return (PAM_CONV_ERR); +} + +static struct pam_conv store_conv = { pam_store_conv, NULL }; + +void +do_pam_session(void) +{ + debug3("PAM: opening session"); + sshpam_err = pam_set_item(sshpam_handle, PAM_CONV, + (const void *)&store_conv); + if (sshpam_err != PAM_SUCCESS) + fatal("PAM: failed to set PAM_CONV: %s", + pam_strerror(sshpam_handle, sshpam_err)); + sshpam_err = pam_open_session(sshpam_handle, 0); + if (sshpam_err != PAM_SUCCESS) + fatal("PAM: pam_open_session(): %s", + pam_strerror(sshpam_handle, sshpam_err)); + sshpam_session_open = 1; +} + +/* * Set a PAM environment string. We need to do this so that the session * modules can handle things like Kerberos/GSI credentials that appear * during the ssh authentication process. */ - int -do_pam_putenv(char *name, char *value) +do_pam_putenv(char *name, char *value) { int ret = 1; -#ifdef HAVE_PAM_PUTENV +#ifdef HAVE_PAM_PUTENV char *compound; size_t len; @@ -712,21 +908,16 @@ return (ret); } -void -print_pam_messages(void) +char ** +fetch_pam_child_environment(void) { - /* XXX */ + return sshpam_env; } char ** fetch_pam_environment(void) { -#ifdef HAVE_PAM_GETENVLIST - debug("PAM: retrieving environment"); return (pam_getenvlist(sshpam_handle)); -#else - return (NULL); -#endif } void diff -ru --new-file openssh-3.7.1p2/auth-pam.h openssh-3.8p1/auth-pam.h --- openssh-3.7.1p2/auth-pam.h 2003-09-02 23:18:53.000000000 +1000 +++ openssh-3.8p1/auth-pam.h 2004-02-10 13:23:29.000000000 +1100 @@ -1,4 +1,4 @@ -/* $Id: auth-pam.h,v 1.21 2003/09/02 13:18:53 djm Exp $ */ +/* $Id: auth-pam.h,v 1.24 2004/02/10 02:23:29 dtucker Exp $ */ /* * Copyright (c) 2000 Damien Miller. All rights reserved. @@ -37,11 +37,12 @@ void do_pam_session(void); void do_pam_set_tty(const char *); void do_pam_setcred(int ); -int is_pam_password_change_required(void); void do_pam_chauthtok(void); int do_pam_putenv(char *, char *); -void print_pam_messages(void); char ** fetch_pam_environment(void); +char ** fetch_pam_child_environment(void); void free_pam_environment(char **); +void sshpam_thread_cleanup(void); +void sshpam_cleanup(void); #endif /* USE_PAM */ Binary files openssh-3.7.1p2/auth-pam.o and openssh-3.8p1/auth-pam.o differ diff -ru --new-file openssh-3.7.1p2/auth-passwd.c openssh-3.8p1/auth-passwd.c --- openssh-3.7.1p2/auth-passwd.c 2003-09-18 18:26:48.000000000 +1000 +++ openssh-3.8p1/auth-passwd.c 2004-02-22 10:23:35.000000000 +1100 @@ -36,19 +36,24 @@ */ #include "includes.h" -RCSID("$OpenBSD: auth-passwd.c,v 1.29 2003/08/26 09:58:43 markus Exp $"); +RCSID("$OpenBSD: auth-passwd.c,v 1.31 2004/01/30 09:48:57 markus Exp $"); #include "packet.h" #include "log.h" #include "servconf.h" #include "auth.h" -#ifdef WITH_AIXAUTHENTICATE -# include "buffer.h" -# include "canohost.h" -extern Buffer loginmsg; -#endif +#include "auth-options.h" extern ServerOptions options; +int sys_auth_passwd(Authctxt *, const char *); + +void +disable_forwarding(void) +{ + no_port_forwarding_flag = 1; + no_agent_forwarding_flag = 1; + no_x11_forwarding_flag = 1; +} /* * Tries to authenticate the user using password. Returns true if @@ -59,29 +64,31 @@ { struct passwd * pw = authctxt->pw; int ok = authctxt->valid; + static int expire_checked = 0; - /* deny if no user. */ - if (pw == NULL) - return 0; #ifndef HAVE_CYGWIN - if (pw && pw->pw_uid == 0 && options.permit_root_login != PERMIT_YES) + if (pw->pw_uid == 0 && options.permit_root_login != PERMIT_YES) ok = 0; #endif if (*password == '\0' && options.permit_empty_passwd == 0) return 0; #if defined(HAVE_OSF_SIA) + /* + * XXX: any reason this is before krb? could be moved to + * sys_auth_passwd()? -dt + */ return auth_sia_password(authctxt, password) && ok; -#else -# ifdef KRB5 +#endif +#ifdef KRB5 if (options.kerberos_authentication == 1) { int ret = auth_krb5_password(authctxt, password); if (ret == 1 || ret == 0) return ret && ok; /* Fall back to ordinary passwd authentication. */ } -# endif -# ifdef HAVE_CYGWIN +#endif +#ifdef HAVE_CYGWIN if (is_winnt) { HANDLE hToken = cygwin_logon_user(pw, password); @@ -90,74 +97,60 @@ cygwin_set_impersonation_token(hToken); return ok; } -# endif -# ifdef WITH_AIXAUTHENTICATE - { - char *authmsg = NULL; - int reenter = 1; - int authsuccess = 0; - - if (authenticate(pw->pw_name, password, &reenter, - &authmsg) == 0 && ok) { - char *msg; - char *host = - (char *)get_canonical_hostname(options.use_dns); - - authsuccess = 1; - aix_remove_embedded_newlines(authmsg); - - debug3("AIX/authenticate succeeded for user %s: %.100s", - pw->pw_name, authmsg); - - /* No pty yet, so just label the line as "ssh" */ - aix_setauthdb(authctxt->user); - if (loginsuccess(authctxt->user, host, "ssh", - &msg) == 0) { - if (msg != NULL) { - debug("%s: msg %s", __func__, msg); - buffer_append(&loginmsg, msg, - strlen(msg)); - xfree(msg); - } - } - } else { - debug3("AIX/authenticate failed for user %s: %.100s", - pw->pw_name, authmsg); +#endif +#if defined(USE_SHADOW) && defined(HAS_SHADOW_EXPIRE) + if (!expire_checked) { + expire_checked = 1; + if (auth_shadow_pwexpired(authctxt)) { + disable_forwarding(); + authctxt->force_pwchange = 1; } + } +#endif + + return (sys_auth_passwd(authctxt, password) && ok); +} - if (authmsg != NULL) - xfree(authmsg); +#ifdef BSD_AUTH +int +sys_auth_passwd(Authctxt *authctxt, const char *password) +{ + struct passwd *pw = authctxt->pw; + auth_session_t *as; - return authsuccess; + as = auth_usercheck(pw->pw_name, authctxt->style, "auth-ssh", + (char *)password); + if (auth_getstate(as) & AUTH_PWEXPIRED) { + auth_close(as); + disable_forwarding(); + authctxt->force_pwchange = 1; + return (1); + } else { + return (auth_close(as)); } -# endif -# ifdef BSD_AUTH - if (auth_userokay(pw->pw_name, authctxt->style, "auth-ssh", - (char *)password) == 0) - return 0; - else - return ok; -# else - { +} +#elif !defined(CUSTOM_SYS_AUTH_PASSWD) +int +sys_auth_passwd(Authctxt *authctxt, const char *password) +{ + struct passwd *pw = authctxt->pw; + char *encrypted_password; + /* Just use the supplied fake password if authctxt is invalid */ char *pw_password = authctxt->valid ? shadow_pw(pw) : pw->pw_passwd; /* Check for users with no password. */ if (strcmp(pw_password, "") == 0 && strcmp(password, "") == 0) - return ok; - else { - /* Encrypt the candidate password using the proper salt. */ - char *encrypted_password = xcrypt(password, - (pw_password[0] && pw_password[1]) ? pw_password : "xx"); - - /* - * Authentication is accepted if the encrypted passwords - * are identical. - */ - return (strcmp(encrypted_password, pw_password) == 0) && ok; - } + return (1); - } -# endif -#endif /* !HAVE_OSF_SIA */ + /* Encrypt the candidate password using the proper salt. */ + encrypted_password = xcrypt(password, + (pw_password[0] && pw_password[1]) ? pw_password : "xx"); + + /* + * Authentication is accepted if the encrypted passwords + * are identical. + */ + return (strcmp(encrypted_password, pw_password) == 0); } +#endif Binary files openssh-3.7.1p2/auth-passwd.o and openssh-3.8p1/auth-passwd.o differ diff -ru --new-file openssh-3.7.1p2/auth-rh-rsa.c openssh-3.8p1/auth-rh-rsa.c --- openssh-3.7.1p2/auth-rh-rsa.c 2003-06-03 10:25:48.000000000 +1000 +++ openssh-3.8p1/auth-rh-rsa.c 2003-11-17 21:13:41.000000000 +1100 @@ -13,7 +13,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: auth-rh-rsa.c,v 1.36 2003/06/02 09:17:34 markus Exp $"); +RCSID("$OpenBSD: auth-rh-rsa.c,v 1.37 2003/11/04 08:54:09 djm Exp $"); #include "packet.h" #include "uidswap.h" @@ -52,14 +52,15 @@ * its host key. Returns true if authentication succeeds. */ int -auth_rhosts_rsa(struct passwd *pw, char *cuser, Key *client_host_key) +auth_rhosts_rsa(Authctxt *authctxt, char *cuser, Key *client_host_key) { char *chost; + struct passwd *pw = authctxt->pw; debug("Trying rhosts with RSA host authentication for client user %.100s", cuser); - if (pw == NULL || client_host_key == NULL || + if (!authctxt->valid || client_host_key == NULL || client_host_key->rsa == NULL) return 0; Binary files openssh-3.7.1p2/auth-rh-rsa.o and openssh-3.8p1/auth-rh-rsa.o differ diff -ru --new-file openssh-3.7.1p2/auth-rhosts.c openssh-3.8p1/auth-rhosts.c --- openssh-3.7.1p2/auth-rhosts.c 2003-06-03 10:25:48.000000000 +1000 +++ openssh-3.8p1/auth-rhosts.c 2003-11-17 21:13:41.000000000 +1100 @@ -14,7 +14,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: auth-rhosts.c,v 1.31 2003/06/02 09:17:34 markus Exp $"); +RCSID("$OpenBSD: auth-rhosts.c,v 1.32 2003/11/04 08:54:09 djm Exp $"); #include "packet.h" #include "uidswap.h" @@ -173,10 +173,6 @@ debug2("auth_rhosts2: clientuser %s hostname %s ipaddr %s", client_user, hostname, ipaddr); - /* no user given */ - if (pw == NULL) - return 0; - /* Switch to the user's uid. */ temporarily_use_uid(pw); /* Binary files openssh-3.7.1p2/auth-rhosts.o and openssh-3.8p1/auth-rhosts.o differ diff -ru --new-file openssh-3.7.1p2/auth-rsa.c openssh-3.8p1/auth-rsa.c --- openssh-3.7.1p2/auth-rsa.c 2003-05-14 13:40:07.000000000 +1000 +++ openssh-3.8p1/auth-rsa.c 2003-11-17 21:13:41.000000000 +1100 @@ -14,7 +14,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: auth-rsa.c,v 1.57 2003/04/08 20:21:28 itojun Exp $"); +RCSID("$OpenBSD: auth-rsa.c,v 1.58 2003/11/04 08:54:09 djm Exp $"); #include #include @@ -284,13 +284,14 @@ * successful. This may exit if there is a serious protocol violation. */ int -auth_rsa(struct passwd *pw, BIGNUM *client_n) +auth_rsa(Authctxt *authctxt, BIGNUM *client_n) { Key *key; char *fp; + struct passwd *pw = authctxt->pw; /* no user given */ - if (pw == NULL) + if (!authctxt->valid) return 0; if (!PRIVSEP(auth_rsa_key_allowed(pw, client_n, &key))) { Binary files openssh-3.7.1p2/auth-rsa.o and openssh-3.8p1/auth-rsa.o differ diff -ru --new-file openssh-3.7.1p2/auth-shadow.c openssh-3.8p1/auth-shadow.c --- openssh-3.7.1p2/auth-shadow.c 1970-01-01 10:00:00.000000000 +1000 +++ openssh-3.8p1/auth-shadow.c 2004-02-22 10:22:05.000000000 +1100 @@ -0,0 +1,135 @@ +/* + * Copyright (c) 2004 Darren Tucker. All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * 1. Redistributions of source code must retain the above copyright + * notice, this list of conditions and the following disclaimer. + * 2. Redistributions in binary form must reproduce the above copyright + * notice, this list of conditions and the following disclaimer in the + * documentation and/or other materials provided with the distribution. + * + * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR + * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES + * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. + * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, + * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT + * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, + * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY + * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT + * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF + * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + */ + +#include "includes.h" +RCSID("$Id: auth-shadow.c,v 1.5 2004/02/21 23:22:05 dtucker Exp $"); + +#if defined(USE_SHADOW) && defined(HAS_SHADOW_EXPIRE) +#include + +#include "auth.h" +#include "buffer.h" +#include "log.h" + +#define DAY (24L * 60 * 60) /* 1 day in seconds */ + +extern Buffer loginmsg; + +/* + * For the account and password expiration functions, we assume the expiry + * occurs the day after the day specified. + */ + +/* + * Check if specified account is expired. Returns 1 if account is expired, + * 0 otherwise. + */ +int +auth_shadow_acctexpired(struct spwd *spw) +{ + time_t today; + int daysleft; + char buf[256]; + + today = time(NULL) / DAY; + daysleft = spw->sp_expire - today; + debug3("%s: today %d sp_expire %d days left %d", __func__, (int)today, + (int)spw->sp_expire, daysleft); + + if (spw->sp_expire == -1) { + debug3("account expiration disabled"); + } else if (daysleft < 0) { + logit("Account %.100s has expired", spw->sp_namp); + return 1; + } else if (daysleft <= spw->sp_warn) { + debug3("account will expire in %d days", daysleft); + snprintf(buf, sizeof(buf), + "Your account will expire in %d day%s.\n", daysleft, + daysleft == 1 ? "" : "s"); + buffer_append(&loginmsg, buf, strlen(buf)); + } + + return 0; +} + +/* + * Checks password expiry for platforms that use shadow passwd files. + * Returns: 1 = password expired, 0 = password not expired + */ +int +auth_shadow_pwexpired(Authctxt *ctxt) +{ + struct spwd *spw = NULL; + const char *user = ctxt->pw->pw_name; + char buf[256]; + time_t today; + int daysleft, disabled = 0; + + if ((spw = getspnam((char *)user)) == NULL) { + error("Could not get shadow information for %.100s", user); + return 0; + } + + today = time(NULL) / DAY; + debug3("%s: today %d sp_lstchg %d sp_max %d", __func__, (int)today, + (int)spw->sp_lstchg, (int)spw->sp_max); + +#if defined(__hpux) && !defined(HAVE_SECUREWARE) + if (iscomsec()) { + struct pr_passwd *pr; + + pr = getprpwnam((char *)user); + + /* Test for Trusted Mode expiry disabled */ + if (pr != NULL && pr->ufld.fd_min == 0 && + pr->ufld.fd_lifetime == 0 && pr->ufld.fd_expire == 0 && + pr->ufld.fd_pw_expire_warning == 0 && + pr->ufld.fd_schange != 0) + disabled = 1; + } +#endif + + /* TODO: check sp_inact */ + daysleft = spw->sp_lstchg + spw->sp_max - today; + if (disabled) { + debug3("password expiration disabled"); + } else if (spw->sp_lstchg == 0) { + logit("User %.100s password has expired (root forced)", user); + return 1; + } else if (spw->sp_max == -1) { + debug3("password expiration disabled"); + } else if (daysleft < 0) { + logit("User %.100s password has expired (password aged)", user); + return 1; + } else if (daysleft <= spw->sp_warn) { + debug3("password will expire in %d days", daysleft); + snprintf(buf, sizeof(buf), + "Your password will expire in %d day%s.\n", daysleft, + daysleft == 1 ? "" : "s"); + buffer_append(&loginmsg, buf, strlen(buf)); + } + + return 0; +} +#endif /* USE_SHADOW && HAS_SHADOW_EXPIRE */ diff -ru --new-file openssh-3.7.1p2/auth-sia.c openssh-3.8p1/auth-sia.c --- openssh-3.7.1p2/auth-sia.c 2003-06-03 10:25:48.000000000 +1000 +++ openssh-3.8p1/auth-sia.c 2003-11-22 14:25:16.000000000 +1100 @@ -31,6 +31,7 @@ #include "log.h" #include "servconf.h" #include "canohost.h" +#include "uidswap.h" #include #include @@ -83,7 +84,7 @@ host = get_canonical_hostname(options.use_dns); - if (sia_ses_init(&ent, saved_argc, saved_argv, host, pw->pw_name, + if (sia_ses_init(&ent, saved_argc, saved_argv, host, pw->pw_name, tty, 0, NULL) != SIASUCCESS) fatal("sia_ses_init failed"); @@ -100,11 +101,11 @@ if (sia_ses_launch(sia_collect_trm, ent) != SIASUCCESS) fatal("Couldn't launch session for %s from %s", pw->pw_name, host); - + sia_ses_release(&ent); - if (setreuid(geteuid(), geteuid()) < 0) - fatal("setreuid: %s", strerror(errno)); + setuid(0); + permanently_set_uid(pw); } #endif /* HAVE_OSF_SIA */ Binary files openssh-3.7.1p2/auth-sia.o and openssh-3.8p1/auth-sia.o differ Binary files openssh-3.7.1p2/auth-skey.o and openssh-3.8p1/auth-skey.o differ diff -ru --new-file openssh-3.7.1p2/auth.c openssh-3.8p1/auth.c --- openssh-3.7.1p2/auth.c 2003-09-03 07:32:46.000000000 +1000 +++ openssh-3.8p1/auth.c 2004-02-22 09:43:15.000000000 +1100 @@ -23,14 +23,14 @@ */ #include "includes.h" -RCSID("$OpenBSD: auth.c,v 1.49 2003/08/26 09:58:43 markus Exp $"); +RCSID("$OpenBSD: auth.c,v 1.51 2003/11/21 11:57:02 djm Exp $"); #ifdef HAVE_LOGIN_H #include #endif -#if defined(HAVE_SHADOW_H) && !defined(DISABLE_SHADOW) +#ifdef USE_SHADOW #include -#endif /* defined(HAVE_SHADOW_H) && !defined(DISABLE_SHADOW) */ +#endif #ifdef HAVE_LIBGEN_H #include @@ -76,7 +76,7 @@ const char *hostname = NULL, *ipaddr = NULL, *passwd = NULL; char *shell; int i; -#if defined(HAVE_SHADOW_H) && !defined(DISABLE_SHADOW) +#ifdef USE_SHADOW struct spwd *spw = NULL; #endif @@ -84,53 +84,24 @@ if (!pw || !pw->pw_name) return 0; -#if defined(HAVE_SHADOW_H) && !defined(DISABLE_SHADOW) +#ifdef USE_SHADOW if (!options.use_pam) spw = getspnam(pw->pw_name); #ifdef HAS_SHADOW_EXPIRE -#define DAY (24L * 60 * 60) /* 1 day in seconds */ - if (!options.use_pam && spw != NULL) { - time_t today; - - today = time(NULL) / DAY; - debug3("allowed_user: today %d sp_expire %d sp_lstchg %d" - " sp_max %d", (int)today, (int)spw->sp_expire, - (int)spw->sp_lstchg, (int)spw->sp_max); - - /* - * We assume account and password expiration occurs the - * day after the day specified. - */ - if (spw->sp_expire != -1 && today > spw->sp_expire) { - logit("Account %.100s has expired", pw->pw_name); - return 0; - } - - if (spw->sp_lstchg == 0) { - logit("User %.100s password has expired (root forced)", - pw->pw_name); - return 0; - } - - if (spw->sp_max != -1 && - today > spw->sp_lstchg + spw->sp_max) { - logit("User %.100s password has expired (password aged)", - pw->pw_name); - return 0; - } - } + if (!options.use_pam && spw != NULL && auth_shadow_acctexpired(spw)) + return 0; #endif /* HAS_SHADOW_EXPIRE */ -#endif /* defined(HAVE_SHADOW_H) && !defined(DISABLE_SHADOW) */ +#endif /* USE_SHADOW */ - /* grab passwd field for locked account check */ -#if defined(HAVE_SHADOW_H) && !defined(DISABLE_SHADOW) + /* grab passwd field for locked account check */ +#ifdef USE_SHADOW if (spw != NULL) passwd = spw->sp_pwdp; #else passwd = pw->pw_passwd; #endif - /* check for locked account */ + /* check for locked account */ if (!options.use_pam && passwd && *passwd) { int locked = 0; @@ -242,7 +213,7 @@ if ((pw->pw_uid != 0) && (geteuid() == 0)) { char *msg; - if (loginrestrictions(pw->pw_name, S_RLOGIN, NULL, &msg) != 0) { + if (loginrestrictions(pw->pw_name, S_RLOGIN, NULL, &msg) != 0) { int loginrestrict_errno = errno; if (msg && *msg) { @@ -252,7 +223,7 @@ pw->pw_name, msg); } /* Don't fail if /etc/nologin set */ - if (!(loginrestrict_errno == EPERM && + if (!(loginrestrict_errno == EPERM && stat(_PATH_NOLOGIN, &st) == 0)) return 0; } @@ -263,14 +234,6 @@ return 1; } -Authctxt * -authctxt_new(void) -{ - Authctxt *authctxt = xmalloc(sizeof(*authctxt)); - memset(authctxt, 0, sizeof(*authctxt)); - return authctxt; -} - void auth_log(Authctxt *authctxt, int authenticated, char *method, char *info) { @@ -598,7 +561,7 @@ memset(&fake, 0, sizeof(fake)); fake.pw_name = "NOUSER"; fake.pw_passwd = - "$2a$06$r3.juUaHZDlIbQaO2dS9FuYxL1W9M81R1Tc92PoSNmzvpEqLkLGrK"; + "$2a$06$r3.juUaHZDlIbQaO2dS9FuYxL1W9M81R1Tc92PoSNmzvpEqLkLGrK"; fake.pw_gecos = "NOUSER"; fake.pw_uid = -1; fake.pw_gid = -1; diff -ru --new-file openssh-3.7.1p2/auth.h openssh-3.8p1/auth.h --- openssh-3.7.1p2/auth.h 2003-09-03 12:11:30.000000000 +1000 +++ openssh-3.8p1/auth.h 2004-02-22 10:22:05.000000000 +1100 @@ -1,4 +1,4 @@ -/* $OpenBSD: auth.h,v 1.46 2003/08/28 12:54:34 markus Exp $ */ +/* $OpenBSD: auth.h,v 1.49 2004/01/30 09:48:57 markus Exp $ */ /* * Copyright (c) 2000 Markus Friedl. All rights reserved. @@ -52,6 +52,7 @@ int valid; /* user exists and is allowed to login */ int attempt; int failures; + int force_pwchange; char *user; /* username sent by the client */ char *service; struct passwd *pw; /* set if 'valid' */ @@ -102,9 +103,9 @@ int auth_rhosts2(struct passwd *, const char *, const char *, const char *); -int auth_rhosts_rsa(struct passwd *, char *, Key *); +int auth_rhosts_rsa(Authctxt *, char *, Key *); int auth_password(Authctxt *, const char *); -int auth_rsa(struct passwd *, BIGNUM *); +int auth_rsa(Authctxt *, BIGNUM *); int auth_rsa_challenge_dialog(Key *); BIGNUM *auth_rsa_generate_challenge(Key *); int auth_rsa_verify_response(Key *, BIGNUM *, u_char[]); @@ -118,15 +119,21 @@ int auth_krb5(Authctxt *authctxt, krb5_data *auth, char **client, krb5_data *); int auth_krb5_tgt(Authctxt *authctxt, krb5_data *tgt); int auth_krb5_password(Authctxt *authctxt, const char *password); -void krb5_cleanup_proc(void *authctxt); +void krb5_cleanup_proc(Authctxt *authctxt); #endif /* KRB5 */ +#if defined(USE_SHADOW) && defined(HAS_SHADOW_EXPIRE) +#include +int auth_shadow_acctexpired(struct spwd *); +int auth_shadow_pwexpired(Authctxt *); +#endif + #include "auth-pam.h" +void disable_forwarding(void); -Authctxt *do_authentication(void); -Authctxt *do_authentication2(void); +void do_authentication(Authctxt *); +void do_authentication2(Authctxt *); -Authctxt *authctxt_new(void); void auth_log(Authctxt *, int, char *, char *); void userauth_finish(Authctxt *, int, char *); int auth_root_allowed(char *); @@ -149,8 +156,6 @@ int verify_response(Authctxt *, const char *); void abandon_challenge_response(Authctxt *); -struct passwd * auth_get_user(void); - char *expand_filename(const char *, struct passwd *); char *authorized_keys_file(struct passwd *); char *authorized_keys_file2(struct passwd *); Binary files openssh-3.7.1p2/auth.o and openssh-3.8p1/auth.o differ diff -ru --new-file openssh-3.7.1p2/auth1.c openssh-3.8p1/auth1.c --- openssh-3.7.1p2/auth1.c 2003-09-03 07:32:46.000000000 +1000 +++ openssh-3.8p1/auth1.c 2003-11-22 14:15:30.000000000 +1100 @@ -10,7 +10,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: auth1.c,v 1.52 2003/08/28 12:54:34 markus Exp $"); +RCSID("$OpenBSD: auth1.c,v 1.55 2003/11/08 16:02:40 jakob Exp $"); #include "xmalloc.h" #include "rsa.h" @@ -139,7 +139,7 @@ BN_num_bits(client_host_key->rsa->n), bits); packet_check_eom(); - authenticated = auth_rhosts_rsa(pw, client_user, + authenticated = auth_rhosts_rsa(authctxt, client_user, client_host_key); key_free(client_host_key); @@ -156,7 +156,7 @@ fatal("do_authloop: BN_new failed"); packet_get_bignum(n); packet_check_eom(); - authenticated = auth_rsa(pw, n); + authenticated = auth_rsa(authctxt, n); BN_clear_free(n); break; @@ -235,7 +235,7 @@ if (authenticated && !check_nt_auth(type == SSH_CMSG_AUTH_PASSWORD, pw)) { packet_disconnect("Authentication rejected for uid %d.", - pw == NULL ? -1 : pw->pw_uid); + pw == NULL ? -1 : pw->pw_uid); authenticated = 0; } #else @@ -246,7 +246,7 @@ #endif #ifdef USE_PAM - if (options.use_pam && authenticated && + if (options.use_pam && authenticated && !PRIVSEP(do_pam_account())) authenticated = 0; #endif @@ -275,10 +275,9 @@ * Performs authentication of an incoming connection. Session key has already * been exchanged and encryption is enabled. */ -Authctxt * -do_authentication(void) +void +do_authentication(Authctxt *authctxt) { - Authctxt *authctxt; u_int ulen; char *user, *style = NULL; @@ -292,7 +291,6 @@ if ((style = strchr(user, ':')) != NULL) *style++ = '\0'; - authctxt = authctxt_new(); authctxt->user = user; authctxt->style = style; @@ -332,6 +330,4 @@ packet_start(SSH_SMSG_SUCCESS); packet_send(); packet_write_wait(); - - return (authctxt); } Binary files openssh-3.7.1p2/auth1.o and openssh-3.8p1/auth1.o differ Binary files openssh-3.7.1p2/auth2-chall.o and openssh-3.8p1/auth2-chall.o differ diff -ru --new-file openssh-3.7.1p2/auth2-gss.c openssh-3.8p1/auth2-gss.c --- openssh-3.7.1p2/auth2-gss.c 2003-09-02 22:59:01.000000000 +1000 +++ openssh-3.8p1/auth2-gss.c 2003-11-21 23:56:47.000000000 +1100 @@ -1,4 +1,4 @@ -/* $OpenBSD: auth2-gss.c,v 1.3 2003/09/01 20:44:54 markus Exp $ */ +/* $OpenBSD: auth2-gss.c,v 1.7 2003/11/21 11:57:03 djm Exp $ */ /* * Copyright (c) 2001-2003 Simon Wilkinson. All rights reserved. @@ -43,6 +43,7 @@ extern ServerOptions options; static void input_gssapi_token(int type, u_int32_t plen, void *ctxt); +static void input_gssapi_mic(int type, u_int32_t plen, void *ctxt); static void input_gssapi_exchange_complete(int type, u_int32_t plen, void *ctxt); static void input_gssapi_errtok(int, u_int32_t, void *); @@ -78,17 +79,19 @@ if (doid) xfree(doid); + present = 0; doid = packet_get_string(&len); - if (doid[0] != SSH_GSS_OIDTYPE || doid[1] != len-2) { - logit("Mechanism OID received using the old encoding form"); - oid.elements = doid; - oid.length = len; - } else { + if (len > 2 && + doid[0] == SSH_GSS_OIDTYPE && + doid[1] == len - 2) { oid.elements = doid + 2; oid.length = len - 2; + gss_test_oid_set_member(&ms, &oid, supported, + &present); + } else { + logit("Badly formed OID received"); } - gss_test_oid_set_member(&ms, &oid, supported, &present); } while (mechs > 0 && !present); gss_release_oid_set(&ms, &supported); @@ -107,7 +110,7 @@ packet_start(SSH2_MSG_USERAUTH_GSSAPI_RESPONSE); - /* Return OID in same format as we received it*/ + /* Return the OID that we received */ packet_put_string(doid, len); packet_send(); @@ -127,7 +130,7 @@ Gssctxt *gssctxt; gss_buffer_desc send_tok = GSS_C_EMPTY_BUFFER; gss_buffer_desc recv_tok; - OM_uint32 maj_status, min_status; + OM_uint32 maj_status, min_status, flags; u_int len; if (authctxt == NULL || (authctxt->methoddata == NULL && !use_privsep)) @@ -140,7 +143,7 @@ packet_check_eom(); maj_status = PRIVSEP(ssh_gssapi_accept_ctx(gssctxt, &recv_tok, - &send_tok, NULL)); + &send_tok, &flags)); xfree(recv_tok.value); @@ -152,7 +155,7 @@ } authctxt->postponed = 0; dispatch_set(SSH2_MSG_USERAUTH_GSSAPI_TOKEN, NULL); - userauth_finish(authctxt, 0, "gssapi"); + userauth_finish(authctxt, 0, "gssapi-with-mic"); } else { if (send_tok.length != 0) { packet_start(SSH2_MSG_USERAUTH_GSSAPI_TOKEN); @@ -161,8 +164,13 @@ } if (maj_status == GSS_S_COMPLETE) { dispatch_set(SSH2_MSG_USERAUTH_GSSAPI_TOKEN, NULL); - dispatch_set(SSH2_MSG_USERAUTH_GSSAPI_EXCHANGE_COMPLETE, - &input_gssapi_exchange_complete); + if (flags & GSS_C_INTEG_FLAG) + dispatch_set(SSH2_MSG_USERAUTH_GSSAPI_MIC, + &input_gssapi_mic); + else + dispatch_set( + SSH2_MSG_USERAUTH_GSSAPI_EXCHANGE_COMPLETE, + &input_gssapi_exchange_complete); } } @@ -222,9 +230,8 @@ gssctxt = authctxt->methoddata; /* - * We don't need to check the status, because the stored credentials - * which userok uses are only populated once the context init step - * has returned complete. + * We don't need to check the status, because we're only enabled in + * the dispatcher once the exchange is complete */ packet_check_eom(); @@ -234,12 +241,53 @@ authctxt->postponed = 0; dispatch_set(SSH2_MSG_USERAUTH_GSSAPI_TOKEN, NULL); dispatch_set(SSH2_MSG_USERAUTH_GSSAPI_ERRTOK, NULL); + dispatch_set(SSH2_MSG_USERAUTH_GSSAPI_MIC, NULL); + dispatch_set(SSH2_MSG_USERAUTH_GSSAPI_EXCHANGE_COMPLETE, NULL); + userauth_finish(authctxt, authenticated, "gssapi-with-mic"); +} + +static void +input_gssapi_mic(int type, u_int32_t plen, void *ctxt) +{ + Authctxt *authctxt = ctxt; + Gssctxt *gssctxt; + int authenticated = 0; + Buffer b; + gss_buffer_desc mic, gssbuf; + u_int len; + + if (authctxt == NULL || (authctxt->methoddata == NULL && !use_privsep)) + fatal("No authentication or GSSAPI context"); + + gssctxt = authctxt->methoddata; + + mic.value = packet_get_string(&len); + mic.length = len; + + ssh_gssapi_buildmic(&b, authctxt->user, authctxt->service, + "gssapi-with-mic"); + + gssbuf.value = buffer_ptr(&b); + gssbuf.length = buffer_len(&b); + + if (!GSS_ERROR(PRIVSEP(ssh_gssapi_checkmic(gssctxt, &gssbuf, &mic)))) + authenticated = PRIVSEP(ssh_gssapi_userok(authctxt->user)); + else + logit("GSSAPI MIC check failed"); + + buffer_free(&b); + xfree(mic.value); + + authctxt->postponed = 0; + dispatch_set(SSH2_MSG_USERAUTH_GSSAPI_TOKEN, NULL); + dispatch_set(SSH2_MSG_USERAUTH_GSSAPI_ERRTOK, NULL); + dispatch_set(SSH2_MSG_USERAUTH_GSSAPI_MIC, NULL); dispatch_set(SSH2_MSG_USERAUTH_GSSAPI_EXCHANGE_COMPLETE, NULL); - userauth_finish(authctxt, authenticated, "gssapi"); + userauth_finish(authctxt, authenticated, "gssapi-with-mic"); } Authmethod method_gssapi = { - "gssapi", + "gssapi-with-mic", userauth_gssapi, &options.gss_authentication }; Binary files openssh-3.7.1p2/auth2-gss.o and openssh-3.8p1/auth2-gss.o differ diff -ru --new-file openssh-3.7.1p2/auth2-hostbased.c openssh-3.8p1/auth2-hostbased.c --- openssh-3.7.1p2/auth2-hostbased.c 2003-06-28 12:38:02.000000000 +1000 +++ openssh-3.8p1/auth2-hostbased.c 2004-01-21 11:02:50.000000000 +1100 @@ -23,7 +23,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: auth2-hostbased.c,v 1.5 2003/06/24 08:23:46 markus Exp $"); +RCSID("$OpenBSD: auth2-hostbased.c,v 1.6 2004/01/19 21:25:15 markus Exp $"); #include "ssh2.h" #include "xmalloc.h" @@ -114,7 +114,7 @@ buffer_len(&b))) == 1) authenticated = 1; - buffer_clear(&b); + buffer_free(&b); done: debug2("userauth_hostbased: authenticated %d", authenticated); if (key != NULL) Binary files openssh-3.7.1p2/auth2-hostbased.o and openssh-3.8p1/auth2-hostbased.o differ Binary files openssh-3.7.1p2/auth2-kbdint.o and openssh-3.8p1/auth2-kbdint.o differ Binary files openssh-3.7.1p2/auth2-none.o and openssh-3.8p1/auth2-none.o differ diff -ru --new-file openssh-3.7.1p2/auth2-passwd.c openssh-3.8p1/auth2-passwd.c --- openssh-3.7.1p2/auth2-passwd.c 2003-09-03 07:32:46.000000000 +1000 +++ openssh-3.8p1/auth2-passwd.c 2003-12-31 11:43:24.000000000 +1100 @@ -23,7 +23,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: auth2-passwd.c,v 1.4 2003/08/26 09:58:43 markus Exp $"); +RCSID("$OpenBSD: auth2-passwd.c,v 1.5 2003/12/31 00:24:50 dtucker Exp $"); #include "xmalloc.h" #include "packet.h" @@ -38,16 +38,24 @@ static int userauth_passwd(Authctxt *authctxt) { - char *password; + char *password, *newpass; int authenticated = 0; int change; - u_int len; + u_int len, newlen; + change = packet_get_char(); - if (change) - logit("password change not supported"); password = packet_get_string(&len); + if (change) { + /* discard new password from packet */ + newpass = packet_get_string(&newlen); + memset(newpass, 0, newlen); + xfree(newpass); + } packet_check_eom(); - if (PRIVSEP(auth_password(authctxt, password)) == 1 + + if (change) + logit("password change not supported"); + else if (PRIVSEP(auth_password(authctxt, password)) == 1 #ifdef HAVE_CYGWIN && check_nt_auth(1, authctxt->pw) #endif Binary files openssh-3.7.1p2/auth2-passwd.o and openssh-3.8p1/auth2-passwd.o differ diff -ru --new-file openssh-3.7.1p2/auth2-pubkey.c openssh-3.8p1/auth2-pubkey.c --- openssh-3.7.1p2/auth2-pubkey.c 2003-06-28 12:38:02.000000000 +1000 +++ openssh-3.8p1/auth2-pubkey.c 2004-01-21 11:02:50.000000000 +1100 @@ -23,7 +23,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: auth2-pubkey.c,v 1.4 2003/06/24 08:23:46 markus Exp $"); +RCSID("$OpenBSD: auth2-pubkey.c,v 1.6 2004/01/19 21:25:15 markus Exp $"); #include "ssh2.h" #include "xmalloc.h" @@ -123,9 +123,9 @@ authenticated = 0; if (PRIVSEP(user_key_allowed(authctxt->pw, key)) && PRIVSEP(key_verify(key, sig, slen, buffer_ptr(&b), - buffer_len(&b))) == 1) + buffer_len(&b))) == 1) authenticated = 1; - buffer_clear(&b); + buffer_free(&b); xfree(sig); } else { debug("test whether pkalg/pkblob are acceptable"); @@ -175,9 +175,6 @@ Key *found; char *fp; - if (pw == NULL) - return 0; - /* Temporarily use the user's uid. */ temporarily_use_uid(pw); Binary files openssh-3.7.1p2/auth2-pubkey.o and openssh-3.8p1/auth2-pubkey.o differ diff -ru --new-file openssh-3.7.1p2/auth2.c openssh-3.8p1/auth2.c --- openssh-3.7.1p2/auth2.c 2003-09-03 07:32:46.000000000 +1000 +++ openssh-3.8p1/auth2.c 2003-11-17 21:13:41.000000000 +1100 @@ -23,7 +23,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: auth2.c,v 1.102 2003/08/26 09:58:43 markus Exp $"); +RCSID("$OpenBSD: auth2.c,v 1.104 2003/11/04 08:54:09 djm Exp $"); #include "ssh2.h" #include "xmalloc.h" @@ -45,8 +45,6 @@ extern u_char *session_id2; extern u_int session_id2_len; -Authctxt *x_authctxt = NULL; - /* methods */ extern Authmethod method_none; @@ -79,19 +77,14 @@ static Authmethod *authmethod_lookup(const char *); static char *authmethods_get(void); int user_key_allowed(struct passwd *, Key *); -int hostbased_key_allowed(struct passwd *, const char *, char *, Key *); /* * loop until authctxt->success == TRUE */ -Authctxt * -do_authentication2(void) +void +do_authentication2(Authctxt *authctxt) { - Authctxt *authctxt = authctxt_new(); - - x_authctxt = authctxt; /*XXX*/ - /* challenge-response is implemented via keyboard interactive */ if (options.challenge_response_authentication) options.kbd_interactive_authentication = 1; @@ -99,8 +92,6 @@ dispatch_init(&dispatch_protocol_error); dispatch_set(SSH2_MSG_SERVICE_REQUEST, &input_service_request); dispatch_run(DISPATCH_BLOCK, &authctxt->success, authctxt); - - return (authctxt); } static void @@ -264,14 +255,6 @@ } } -/* get current user */ - -struct passwd* -auth_get_user(void) -{ - return (x_authctxt != NULL && x_authctxt->valid) ? x_authctxt->pw : NULL; -} - #define DELIM "," static char * Binary files openssh-3.7.1p2/auth2.o and openssh-3.8p1/auth2.o differ diff -ru --new-file openssh-3.7.1p2/authfd.c openssh-3.8p1/authfd.c --- openssh-3.7.1p2/authfd.c 2003-07-03 13:46:56.000000000 +1000 +++ openssh-3.8p1/authfd.c 2003-11-21 23:56:47.000000000 +1100 @@ -35,7 +35,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: authfd.c,v 1.61 2003/06/28 16:23:06 deraadt Exp $"); +RCSID("$OpenBSD: authfd.c,v 1.63 2003/11/21 11:57:03 djm Exp $"); #include @@ -114,7 +114,8 @@ static int ssh_request_reply(AuthenticationConnection *auth, Buffer *request, Buffer *reply) { - int l, len; + int l; + u_int len; char buf[1024]; /* Get the length of the message, and format it in the buffer. */ @@ -147,7 +148,7 @@ /* Extract the length, and check it for sanity. */ len = GET_32BIT(buf); if (len > 256 * 1024) - fatal("Authentication response too long: %d", len); + fatal("Authentication response too long: %u", len); /* Read the rest of the response in to the buffer. */ buffer_clear(reply); @@ -292,7 +293,7 @@ /* Get the number of entries in the response and check it for sanity. */ auth->howmany = buffer_get_int(&auth->identities); - if (auth->howmany > 1024) + if ((u_int)auth->howmany > 1024) fatal("Too many identities in authentication reply: %d", auth->howmany); @@ -589,7 +590,7 @@ } int -ssh_update_card(AuthenticationConnection *auth, int add, +ssh_update_card(AuthenticationConnection *auth, int add, const char *reader_id, const char *pin, u_int life, u_int confirm) { Buffer msg; @@ -606,7 +607,7 @@ buffer_put_char(&msg, type); buffer_put_cstring(&msg, reader_id); buffer_put_cstring(&msg, pin); - + if (constrained) { if (life != 0) { buffer_put_char(&msg, SSH_AGENT_CONSTRAIN_LIFETIME); diff -ru --new-file openssh-3.7.1p2/authfd.h openssh-3.8p1/authfd.h --- openssh-3.7.1p2/authfd.h 2003-06-11 22:06:33.000000000 +1000 +++ openssh-3.8p1/authfd.h 2003-11-21 23:48:55.000000000 +1100 @@ -1,4 +1,4 @@ -/* $OpenBSD: authfd.h,v 1.33 2003/06/11 11:18:38 djm Exp $ */ +/* $OpenBSD: authfd.h,v 1.34 2003/11/21 11:57:03 djm Exp $ */ /* * Author: Tatu Ylonen @@ -83,7 +83,7 @@ int ssh_remove_identity(AuthenticationConnection *, Key *); int ssh_remove_all_identities(AuthenticationConnection *, int); int ssh_lock_agent(AuthenticationConnection *, int, const char *); -int ssh_update_card(AuthenticationConnection *, int, const char *, +int ssh_update_card(AuthenticationConnection *, int, const char *, const char *, u_int, u_int); int Binary files openssh-3.7.1p2/authfd.o and openssh-3.8p1/authfd.o differ diff -ru --new-file openssh-3.7.1p2/authfile.c openssh-3.8p1/authfile.c --- openssh-3.7.1p2/authfile.c 2003-05-25 14:38:33.000000000 +1000 +++ openssh-3.8p1/authfile.c 2003-09-22 21:01:27.000000000 +1000 @@ -36,7 +36,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: authfile.c,v 1.54 2003/05/24 09:30:39 djm Exp $"); +RCSID("$OpenBSD: authfile.c,v 1.55 2003/09/18 07:56:05 markus Exp $"); #include #include @@ -143,6 +143,7 @@ fd = open(filename, O_WRONLY | O_CREAT | O_TRUNC, 0600); if (fd < 0) { error("open %s failed: %s.", filename, strerror(errno)); + buffer_free(&encrypted); return 0; } if (write(fd, buffer_ptr(&encrypted), buffer_len(&encrypted)) != Binary files openssh-3.7.1p2/authfile.o and openssh-3.8p1/authfile.o differ diff -ru --new-file openssh-3.7.1p2/bufaux.c openssh-3.8p1/bufaux.c --- openssh-3.7.1p2/bufaux.c 2003-05-14 13:40:07.000000000 +1000 +++ openssh-3.8p1/bufaux.c 2004-02-24 09:21:41.000000000 +1100 @@ -37,7 +37,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: bufaux.c,v 1.29 2003/04/08 20:21:28 itojun Exp $"); +RCSID("$OpenBSD: bufaux.c,v 1.32 2004/02/23 15:12:46 markus Exp $"); #include #include "bufaux.h" @@ -50,7 +50,7 @@ * by (bits+7)/8 bytes of binary data, msb first. */ void -buffer_put_bignum(Buffer *buffer, BIGNUM *value) +buffer_put_bignum(Buffer *buffer, const BIGNUM *value) { int bits = BN_num_bits(value); int bin_size = (bits + 7) / 8; @@ -80,7 +80,7 @@ void buffer_get_bignum(Buffer *buffer, BIGNUM *value) { - int bits, bytes; + u_int bits, bytes; u_char buf[2], *bin; /* Get the number for bits. */ @@ -101,48 +101,49 @@ * Stores an BIGNUM in the buffer in SSH2 format. */ void -buffer_put_bignum2(Buffer *buffer, BIGNUM *value) +buffer_put_bignum2(Buffer *buffer, const BIGNUM *value) { - int bytes = BN_num_bytes(value) + 1; - u_char *buf = xmalloc(bytes); + u_int bytes; + u_char *buf; int oi; - int hasnohigh = 0; + u_int hasnohigh = 0; + if (BN_is_zero(value)) { + buffer_put_int(buffer, 0); + return; + } + if (value->neg) + fatal("buffer_put_bignum2: negative numbers not supported"); + bytes = BN_num_bytes(value) + 1; /* extra padding byte */ + if (bytes < 2) + fatal("buffer_put_bignum2: BN too small"); + buf = xmalloc(bytes); buf[0] = '\0'; /* Get the value of in binary */ oi = BN_bn2bin(value, buf+1); if (oi != bytes-1) - fatal("buffer_put_bignum: BN_bn2bin() failed: oi %d != bin_size %d", - oi, bytes); + fatal("buffer_put_bignum2: BN_bn2bin() failed: " + "oi %d != bin_size %d", oi, bytes); hasnohigh = (buf[1] & 0x80) ? 0 : 1; - if (value->neg) { - /**XXX should be two's-complement */ - int i, carry; - u_char *uc = buf; - logit("negativ!"); - for (i = bytes-1, carry = 1; i>=0; i--) { - uc[i] ^= 0xff; - if (carry) - carry = !++uc[i]; - } - } buffer_put_string(buffer, buf+hasnohigh, bytes-hasnohigh); memset(buf, 0, bytes); xfree(buf); } -/* XXX does not handle negative BNs */ void buffer_get_bignum2(Buffer *buffer, BIGNUM *value) { u_int len; u_char *bin = buffer_get_string(buffer, &len); + if (len > 0 && (bin[0] & 0x80)) + fatal("buffer_get_bignum2: negative numbers not supported"); if (len > 8 * 1024) fatal("buffer_get_bignum2: cannot handle BN of size %d", len); BN_bin2bn(bin, len, value); xfree(bin); } + /* * Returns integers from the buffer (msb first). */ diff -ru --new-file openssh-3.7.1p2/bufaux.h openssh-3.8p1/bufaux.h --- openssh-3.7.1p2/bufaux.h 2003-04-28 04:01:37.000000000 +1000 +++ openssh-3.8p1/bufaux.h 2003-11-17 21:18:23.000000000 +1100 @@ -1,4 +1,4 @@ -/* $OpenBSD: bufaux.h,v 1.18 2002/04/20 09:14:58 markus Exp $ */ +/* $OpenBSD: bufaux.h,v 1.19 2003/11/10 16:23:41 jakob Exp $ */ /* * Author: Tatu Ylonen @@ -18,8 +18,8 @@ #include "buffer.h" #include -void buffer_put_bignum(Buffer *, BIGNUM *); -void buffer_put_bignum2(Buffer *, BIGNUM *); +void buffer_put_bignum(Buffer *, const BIGNUM *); +void buffer_put_bignum2(Buffer *, const BIGNUM *); void buffer_get_bignum(Buffer *, BIGNUM *); void buffer_get_bignum2(Buffer *, BIGNUM *); Binary files openssh-3.7.1p2/bufaux.o and openssh-3.8p1/bufaux.o differ diff -ru --new-file openssh-3.7.1p2/buffer.c openssh-3.8p1/buffer.c --- openssh-3.7.1p2/buffer.c 2003-09-23 18:55:43.000000000 +1000 +++ openssh-3.8p1/buffer.c 2003-11-21 23:56:47.000000000 +1100 @@ -12,7 +12,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: buffer.c,v 1.19 2003/09/18 07:54:48 markus Exp $"); +RCSID("$OpenBSD: buffer.c,v 1.21 2003/11/21 11:57:03 djm Exp $"); #include "xmalloc.h" #include "buffer.h" @@ -105,7 +105,7 @@ goto restart; } /* Increase the size of the buffer and retry. */ - + newlen = buffer->alloc + len + 32768; if (newlen > 0xa00000) fatal("buffer_append_space: alloc %u not supported", @@ -169,7 +169,7 @@ void buffer_dump(Buffer *buffer) { - int i; + u_int i; u_char *ucp = buffer->buf; for (i = buffer->offset; i < buffer->end; i++) { Binary files openssh-3.7.1p2/buffer.o and openssh-3.8p1/buffer.o differ diff -ru --new-file openssh-3.7.1p2/canohost.c openssh-3.8p1/canohost.c --- openssh-3.7.1p2/canohost.c 2003-08-07 13:29:04.000000000 +1000 +++ openssh-3.8p1/canohost.c 2003-11-24 12:57:25.000000000 +1100 @@ -12,7 +12,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: canohost.c,v 1.37 2003/06/02 09:17:34 markus Exp $"); +RCSID("$OpenBSD: canohost.c,v 1.38 2003/09/23 20:17:11 markus Exp $"); #include "packet.h" #include "xmalloc.h" @@ -20,6 +20,7 @@ #include "canohost.h" static void check_ip_options(int, char *); +static void ipv64_normalise_mapped(struct sockaddr_storage *, socklen_t *); /* * Return the canonical name of the host at the other end of the socket. The @@ -40,31 +41,11 @@ memset(&from, 0, sizeof(from)); if (getpeername(socket, (struct sockaddr *)&from, &fromlen) < 0) { debug("getpeername failed: %.100s", strerror(errno)); - fatal_cleanup(); + cleanup_exit(255); } -#ifdef IPV4_IN_IPV6 - if (from.ss_family == AF_INET6) { - struct sockaddr_in6 *from6 = (struct sockaddr_in6 *)&from; - - /* Detect IPv4 in IPv6 mapped address and convert it to */ - /* plain (AF_INET) IPv4 address */ - if (IN6_IS_ADDR_V4MAPPED(&from6->sin6_addr)) { - struct sockaddr_in *from4 = (struct sockaddr_in *)&from; - struct in_addr addr; - u_int16_t port; - - memcpy(&addr, ((char *)&from6->sin6_addr) + 12, sizeof(addr)); - port = from6->sin6_port; - - memset(&from, 0, sizeof(from)); - - from4->sin_family = AF_INET; - fromlen = sizeof(*from4); - memcpy(&from4->sin_addr, &addr, sizeof(addr)); - from4->sin_port = port; - } - } -#endif + + ipv64_normalise_mapped(&from, &fromlen); + if (from.ss_family == AF_INET6) fromlen = sizeof(struct sockaddr_in6); @@ -185,6 +166,31 @@ #endif /* IP_OPTIONS */ } +static void +ipv64_normalise_mapped(struct sockaddr_storage *addr, socklen_t *len) +{ + struct sockaddr_in6 *a6 = (struct sockaddr_in6 *)addr; + struct sockaddr_in *a4 = (struct sockaddr_in *)addr; + struct in_addr inaddr; + u_int16_t port; + + if (addr->ss_family != AF_INET6 || + !IN6_IS_ADDR_V4MAPPED(&a6->sin6_addr)) + return; + + debug3("Normalising mapped IPv4 in IPv6 address"); + + memcpy(&inaddr, ((char *)&a6->sin6_addr) + 12, sizeof(inaddr)); + port = a6->sin6_port; + + memset(addr, 0, sizeof(*a4)); + + a4->sin_family = AF_INET; + *len = sizeof(*a4); + memcpy(&a4->sin_addr, &inaddr, sizeof(inaddr)); + a4->sin_port = port; +} + /* * Return the canonical name of the host in the other side of the current * connection. The host name is cached, so it is efficient to call this @@ -296,7 +302,7 @@ canonical_host_ip = get_peer_ipaddr(packet_get_connection_in()); if (canonical_host_ip == NULL) - fatal_cleanup(); + cleanup_exit(255); } else { /* If not on socket, return UNKNOWN. */ canonical_host_ip = xstrdup("UNKNOWN"); @@ -336,7 +342,7 @@ } else { if (getpeername(sock, (struct sockaddr *)&from, &fromlen) < 0) { debug("getpeername failed: %.100s", strerror(errno)); - fatal_cleanup(); + cleanup_exit(255); } } Binary files openssh-3.7.1p2/canohost.o and openssh-3.8p1/canohost.o differ diff -ru --new-file openssh-3.7.1p2/channels.c openssh-3.8p1/channels.c --- openssh-3.7.1p2/channels.c 2003-09-17 07:34:12.000000000 +1000 +++ openssh-3.8p1/channels.c 2004-01-21 11:02:09.000000000 +1100 @@ -39,7 +39,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: channels.c,v 1.195 2003/09/16 21:02:40 markus Exp $"); +RCSID("$OpenBSD: channels.c,v 1.200 2004/01/19 09:24:21 markus Exp $"); #include "ssh.h" #include "ssh1.h" @@ -217,7 +217,6 @@ channels = xmalloc(channels_alloc * sizeof(Channel *)); for (i = 0; i < channels_alloc; i++) channels[i] = NULL; - fatal_add_cleanup((void (*) (void *)) channel_free_all, NULL); } /* Try to find a free slot where to put the new channel. */ for (found = -1, i = 0; i < channels_alloc; i++) @@ -971,7 +970,7 @@ have = buffer_len(&c->input); if (!(c->flags & SSH_SOCKS5_AUTHDONE)) { /* format: ver | nmethods | methods */ - if (have < 2) + if (have < 2) return 0; nmethods = p[1]; if (have < nmethods + 2) @@ -1036,7 +1035,7 @@ else if (inet_ntop(af, dest_addr, c->path, sizeof(c->path)) == NULL) return -1; c->host_port = ntohs(dest_port); - + debug2("channel %d: dynamic request: socks5 host %s port %u command %u", c->self, c->path, c->host_port, s5_req.command); @@ -1398,9 +1397,9 @@ data = buffer_ptr(&c->output); dlen = buffer_len(&c->output); #ifdef _AIX - /* XXX: Later AIX versions can't push as much data to tty */ - if (compat20 && c->wfd_isatty && dlen > 8*1024) - dlen = 8*1024; + /* XXX: Later AIX versions can't push as much data to tty */ + if (compat20 && c->wfd_isatty) + dlen = MIN(dlen, 8*1024); #endif len = write(c->wfd, data, dlen); if (len < 0 && (errno == EINTR || errno == EAGAIN)) @@ -1818,13 +1817,25 @@ c->type != SSH_CHANNEL_X11_OPEN) return; - /* same for protocol 1.5 if output end is no longer open */ - if (!compat13 && c->ostate != CHAN_OUTPUT_OPEN) - return; - /* Get the data. */ data = packet_get_string(&data_len); + /* + * Ignore data for protocol > 1.3 if output end is no longer open. + * For protocol 2 the sending side is reducing its window as it sends + * data, so we must 'fake' consumption of the data in order to ensure + * that window updates are sent back. Otherwise the connection might + * deadlock. + */ + if (!compat13 && c->ostate != CHAN_OUTPUT_OPEN) { + if (compat20) { + c->local_window -= data_len; + c->local_consumed += data_len; + } + xfree(data); + return; + } + if (compat20) { if (data_len > c->local_maxpacket) { logit("channel %d: rcvd big packet %d, maxpack %d", @@ -2196,7 +2207,7 @@ continue; } /* Start listening for connections on the socket. */ - if (listen(sock, 5) < 0) { + if (listen(sock, SSH_LISTEN_BACKLOG) < 0) { error("listen: %.100s", strerror(errno)); close(sock); continue; @@ -2551,7 +2562,7 @@ /* Start listening for connections on the socket. */ for (n = 0; n < num_socks; n++) { sock = socks[n]; - if (listen(sock, 5) < 0) { + if (listen(sock, SSH_LISTEN_BACKLOG) < 0) { error("listen: %.100s", strerror(errno)); close(sock); return -1; @@ -2839,46 +2850,3 @@ packet_send(); packet_write_wait(); } - -/* This is called to process an SSH_SMSG_AGENT_OPEN message. */ - -void -auth_input_open_request(int type, u_int32_t seq, void *ctxt) -{ - Channel *c = NULL; - int remote_id, sock; - - /* Read the remote channel number from the message. */ - remote_id = packet_get_int(); - packet_check_eom(); - - /* - * Get a connection to the local authentication agent (this may again - * get forwarded). - */ - sock = ssh_get_authentication_socket(); - - /* - * If we could not connect the agent, send an error message back to - * the server. This should never happen unless the agent dies, - * because authentication forwarding is only enabled if we have an - * agent. - */ - if (sock >= 0) { - c = channel_new("", SSH_CHANNEL_OPEN, sock, sock, - -1, 0, 0, 0, "authentication agent connection", 1); - c->remote_id = remote_id; - c->force_drain = 1; - } - if (c == NULL) { - packet_start(SSH_MSG_CHANNEL_OPEN_FAILURE); - packet_put_int(remote_id); - } else { - /* Send a confirmation to the remote host. */ - debug("Forwarding authentication connection."); - packet_start(SSH_MSG_CHANNEL_OPEN_CONFIRMATION); - packet_put_int(remote_id); - packet_put_int(c->self); - } - packet_send(); -} diff -ru --new-file openssh-3.7.1p2/channels.h openssh-3.8p1/channels.h --- openssh-3.7.1p2/channels.h 2002-07-23 01:28:54.000000000 +1000 +++ openssh-3.8p1/channels.h 2003-10-02 16:17:00.000000000 +1000 @@ -1,4 +1,4 @@ -/* $OpenBSD: channels.h,v 1.70 2002/06/24 14:33:27 markus Exp $ */ +/* $OpenBSD: channels.h,v 1.71 2003/09/23 20:41:11 markus Exp $ */ /* * Author: Tatu Ylonen @@ -214,7 +214,6 @@ /* agent forwarding */ void auth_request_forwarding(void); -void auth_input_open_request(int, u_int32_t, void *); /* channel close */ Binary files openssh-3.7.1p2/channels.o and openssh-3.8p1/channels.o differ diff -ru --new-file openssh-3.7.1p2/cipher-3des1.c openssh-3.8p1/cipher-3des1.c --- openssh-3.7.1p2/cipher-3des1.c 2003-09-23 19:24:21.000000000 +1000 +++ openssh-3.8p1/cipher-3des1.c 2003-12-31 11:36:00.000000000 +1100 @@ -23,7 +23,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: cipher-3des1.c,v 1.1 2003/05/15 03:08:29 markus Exp $"); +RCSID("$OpenBSD: cipher-3des1.c,v 1.2 2003/12/22 20:29:55 markus Exp $"); #include #include "xmalloc.h" @@ -126,6 +126,9 @@ struct ssh1_3des_ctx *c; if ((c = EVP_CIPHER_CTX_get_app_data(ctx)) != NULL) { + EVP_CIPHER_CTX_cleanup(&c->k1); + EVP_CIPHER_CTX_cleanup(&c->k2); + EVP_CIPHER_CTX_cleanup(&c->k3); memset(c, 0, sizeof(*c)); xfree(c); EVP_CIPHER_CTX_set_app_data(ctx, NULL); Binary files openssh-3.7.1p2/cipher-3des1.o and openssh-3.8p1/cipher-3des1.o differ diff -ru --new-file openssh-3.7.1p2/cipher-acss.c openssh-3.8p1/cipher-acss.c --- openssh-3.7.1p2/cipher-acss.c 1970-01-01 10:00:00.000000000 +1000 +++ openssh-3.8p1/cipher-acss.c 2004-02-06 15:26:11.000000000 +1100 @@ -0,0 +1,84 @@ +/* + * Copyright (c) 2004 The OpenBSD project + * + * Permission to use, copy, modify, and distribute this software for any + * purpose with or without fee is hereby granted, provided that the above + * copyright notice and this permission notice appear in all copies. + * + * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES + * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR + * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES + * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN + * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF + * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. + */ + +#include "includes.h" +#include + +RCSID("$Id: cipher-acss.c,v 1.2 2004/02/06 04:26:11 dtucker Exp $"); + +#if !defined(EVP_CTRL_SET_ACSS_MODE) && (OPENSSL_VERSION_NUMBER >= 0x00907000L) + +#include "acss.h" + +#define data(ctx) ((EVP_ACSS_KEY *)(ctx)->cipher_data) + +typedef struct { + ACSS_KEY ks; +} EVP_ACSS_KEY; + +#define EVP_CTRL_SET_ACSS_MODE 0xff06 +#define EVP_CTRL_SET_ACSS_SUBKEY 0xff07 + +static int +acss_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key, + const unsigned char *iv, int enc) +{ + acss_setkey(&data(ctx)->ks,key,enc,ACSS_DATA); + return 1; +} + +static int +acss_ciph(EVP_CIPHER_CTX *ctx, unsigned char *out, const unsigned char *in, + unsigned int inl) +{ + acss(&data(ctx)->ks,inl,in,out); + return 1; +} + +static int +acss_ctrl(EVP_CIPHER_CTX *ctx, int type, int arg, void *ptr) +{ + switch(type) { + case EVP_CTRL_SET_ACSS_MODE: + data(ctx)->ks.mode = arg; + return 1; + case EVP_CTRL_SET_ACSS_SUBKEY: + acss_setsubkey(&data(ctx)->ks,(unsigned char *)ptr); + return 1; + default: + return -1; + } +} + +const EVP_CIPHER * +evp_acss(void) +{ + static EVP_CIPHER acss_cipher; + + memset(&acss_cipher, 0, sizeof(EVP_CIPHER)); + + acss_cipher.nid = NID_undef; + acss_cipher.block_size = 1; + acss_cipher.key_len = 5; + acss_cipher.init = acss_init_key; + acss_cipher.do_cipher = acss_ciph; + acss_cipher.ctx_size = sizeof(EVP_ACSS_KEY); + acss_cipher.ctrl = acss_ctrl; + + return (&acss_cipher); +} +#endif + diff -ru --new-file openssh-3.7.1p2/cipher-aes.c openssh-3.8p1/cipher-aes.c --- openssh-3.7.1p2/cipher-aes.c 2003-09-23 19:24:21.000000000 +1000 +++ openssh-3.8p1/cipher-aes.c 2003-12-09 19:05:43.000000000 +1100 @@ -24,7 +24,7 @@ #include "includes.h" #if OPENSSL_VERSION_NUMBER < 0x00907000L -RCSID("$OpenBSD: cipher-aes.c,v 1.1 2003/05/15 03:08:29 markus Exp $"); +RCSID("$OpenBSD: cipher-aes.c,v 1.2 2003/11/26 21:44:29 djm Exp $"); #include #include "rijndael.h" Binary files openssh-3.7.1p2/cipher-aes.o and openssh-3.8p1/cipher-aes.o differ Binary files openssh-3.7.1p2/cipher-bf1.o and openssh-3.8p1/cipher-bf1.o differ diff -ru --new-file openssh-3.7.1p2/cipher-ctr.c openssh-3.8p1/cipher-ctr.c --- openssh-3.7.1p2/cipher-ctr.c 2003-09-23 19:24:21.000000000 +1000 +++ openssh-3.8p1/cipher-ctr.c 2004-02-07 10:41:49.000000000 +1100 @@ -14,7 +14,7 @@ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */ #include "includes.h" -RCSID("$OpenBSD: cipher-ctr.c,v 1.2 2003/06/17 18:14:23 markus Exp $"); +RCSID("$OpenBSD: cipher-ctr.c,v 1.4 2004/02/06 23:41:13 dtucker Exp $"); #include @@ -94,7 +94,8 @@ EVP_CIPHER_CTX_set_app_data(ctx, c); } if (key != NULL) - AES_set_encrypt_key(key, ctx->key_len * 8, &c->aes_ctx); + AES_set_encrypt_key(key, EVP_CIPHER_CTX_key_length(ctx) * 8, + &c->aes_ctx); if (iv != NULL) memcpy(c->aes_counter, iv, AES_BLOCK_SIZE); return (1); Binary files openssh-3.7.1p2/cipher-ctr.o and openssh-3.8p1/cipher-ctr.o differ diff -ru --new-file openssh-3.7.1p2/cipher.c openssh-3.8p1/cipher.c --- openssh-3.7.1p2/cipher.c 2003-09-23 19:24:21.000000000 +1000 +++ openssh-3.8p1/cipher.c 2004-02-07 12:29:39.000000000 +1100 @@ -35,7 +35,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: cipher.c,v 1.65 2003/05/17 04:27:52 markus Exp $"); +RCSID("$OpenBSD: cipher.c,v 1.68 2004/01/23 19:26:33 hshoexer Exp $"); #include "xmalloc.h" #include "log.h" @@ -52,6 +52,17 @@ extern const EVP_CIPHER *evp_rijndael(void); extern void ssh_rijndael_iv(EVP_CIPHER_CTX *, int, u_char *, u_int); #endif + +#if !defined(EVP_CTRL_SET_ACSS_MODE) +# if (OPENSSL_VERSION_NUMBER >= 0x00907000L) +extern const EVP_CIPHER *evp_acss(void); +# define EVP_acss evp_acss +# define EVP_CTRL_SET_ACSS_MODE xxx /* used below */ +# else +# define EVP_acss NULL /* Don't try to support ACSS on older OpenSSL */ +# endif /* (OPENSSL_VERSION_NUMBER >= 0x00906000L) */ +#endif /* !defined(EVP_CTRL_SET_ACSS_MODE) */ + extern const EVP_CIPHER *evp_ssh1_bf(void); extern const EVP_CIPHER *evp_ssh1_3des(void); extern void ssh1_3des_iv(EVP_CIPHER_CTX *, int, u_char *, int); @@ -87,31 +98,33 @@ { "rijndael-cbc@lysator.liu.se", SSH_CIPHER_SSH2, 16, 32, EVP_aes_256_cbc }, #endif -#if OPENSSL_VERSION_NUMBER >= 0x00906000L +#if OPENSSL_VERSION_NUMBER >= 0x00905000L { "aes128-ctr", SSH_CIPHER_SSH2, 16, 16, evp_aes_128_ctr }, { "aes192-ctr", SSH_CIPHER_SSH2, 16, 24, evp_aes_128_ctr }, { "aes256-ctr", SSH_CIPHER_SSH2, 16, 32, evp_aes_128_ctr }, #endif - +#if defined(EVP_CTRL_SET_ACSS_MODE) + { "acss@openssh.org", SSH_CIPHER_SSH2, 16, 5, EVP_acss }, +#endif { NULL, SSH_CIPHER_ILLEGAL, 0, 0, NULL } }; /*--*/ u_int -cipher_blocksize(Cipher *c) +cipher_blocksize(const Cipher *c) { return (c->block_size); } u_int -cipher_keylen(Cipher *c) +cipher_keylen(const Cipher *c) { return (c->key_len); } u_int -cipher_get_number(Cipher *c) +cipher_get_number(const Cipher *c) { return (c->number); } @@ -311,7 +324,7 @@ */ int -cipher_get_keyiv_len(CipherContext *cc) +cipher_get_keyiv_len(const CipherContext *cc) { Cipher *c = cc->cipher; int ivlen; @@ -397,12 +410,12 @@ #endif int -cipher_get_keycontext(CipherContext *cc, u_char *dat) +cipher_get_keycontext(const CipherContext *cc, u_char *dat) { Cipher *c = cc->cipher; int plen = 0; - if (c->evptype == EVP_rc4) { + if (c->evptype == EVP_rc4 || c->evptype == EVP_acss) { plen = EVP_X_STATE_LEN(cc->evp); if (dat == NULL) return (plen); @@ -417,7 +430,7 @@ Cipher *c = cc->cipher; int plen; - if (c->evptype == EVP_rc4) { + if (c->evptype == EVP_rc4 || c->evptype == EVP_acss) { plen = EVP_X_STATE_LEN(cc->evp); memcpy(EVP_X_STATE(cc->evp), dat, plen); } diff -ru --new-file openssh-3.7.1p2/cipher.h openssh-3.8p1/cipher.h --- openssh-3.7.1p2/cipher.h 2002-03-22 12:39:45.000000000 +1100 +++ openssh-3.8p1/cipher.h 2003-11-17 21:18:23.000000000 +1100 @@ -1,4 +1,4 @@ -/* $OpenBSD: cipher.h,v 1.33 2002/03/18 17:13:15 markus Exp $ */ +/* $OpenBSD: cipher.h,v 1.34 2003/11/10 16:23:41 jakob Exp $ */ /* * Author: Tatu Ylonen @@ -79,13 +79,13 @@ void cipher_crypt(CipherContext *, u_char *, const u_char *, u_int); void cipher_cleanup(CipherContext *); void cipher_set_key_string(CipherContext *, Cipher *, const char *, int); -u_int cipher_blocksize(Cipher *); -u_int cipher_keylen(Cipher *); +u_int cipher_blocksize(const Cipher *); +u_int cipher_keylen(const Cipher *); -u_int cipher_get_number(Cipher *); +u_int cipher_get_number(const Cipher *); void cipher_get_keyiv(CipherContext *, u_char *, u_int); void cipher_set_keyiv(CipherContext *, u_char *); -int cipher_get_keyiv_len(CipherContext *); -int cipher_get_keycontext(CipherContext *, u_char *); +int cipher_get_keyiv_len(const CipherContext *); +int cipher_get_keycontext(const CipherContext *, u_char *); void cipher_set_keycontext(CipherContext *, u_char *); #endif /* CIPHER_H */ Binary files openssh-3.7.1p2/cipher.o and openssh-3.8p1/cipher.o differ diff -ru --new-file openssh-3.7.1p2/cleanup.c openssh-3.8p1/cleanup.c --- openssh-3.7.1p2/cleanup.c 1970-01-01 10:00:00.000000000 +1000 +++ openssh-3.8p1/cleanup.c 2003-10-02 16:12:37.000000000 +1000 @@ -0,0 +1,26 @@ +/* + * Copyright (c) 2003 Markus Friedl + * + * Permission to use, copy, modify, and distribute this software for any + * purpose with or without fee is hereby granted, provided that the above + * copyright notice and this permission notice appear in all copies. + * + * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES + * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR + * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES + * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN + * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF + * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. + */ +#include "includes.h" +RCSID("$OpenBSD: cleanup.c,v 1.1 2003/09/23 20:17:11 markus Exp $"); + +#include "log.h" + +/* default implementation */ +void +cleanup_exit(int i) +{ + _exit(i); +} diff -ru --new-file openssh-3.7.1p2/clientloop.c openssh-3.8p1/clientloop.c --- openssh-3.7.1p2/clientloop.c 2003-07-03 13:46:56.000000000 +1000 +++ openssh-3.8p1/clientloop.c 2003-12-17 16:33:11.000000000 +1100 @@ -59,7 +59,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: clientloop.c,v 1.112 2003/06/28 16:23:06 deraadt Exp $"); +RCSID("$OpenBSD: clientloop.c,v 1.117 2003/12/16 15:49:51 markus Exp $"); #include "ssh.h" #include "ssh1.h" @@ -89,6 +89,9 @@ /* Flag indicating that stdin should be redirected from /dev/null. */ extern int stdin_null_flag; +/* Flag indicating that no shell has been requested */ +extern int no_shell_flag; + /* * Name of the host we are connecting to. This is the name given on the * command line, or the HostName specified for the user-supplied name in a @@ -124,6 +127,7 @@ static int connection_out; /* Connection to server (output). */ static int need_rekeying; /* Set to non-zero if rekeying is requested. */ static int session_closed = 0; /* In SSH2: login session closed. */ +static int server_alive_timeouts = 0; static void client_init_dispatch(void); int session_ident = -1; @@ -139,7 +143,6 @@ if (in_non_blocking_mode) { (void) fcntl(fileno(stdin), F_SETFL, 0); in_non_blocking_mode = 0; - fatal_remove_cleanup((void (*) (void *)) leave_non_blocking, NULL); } } @@ -150,7 +153,6 @@ { in_non_blocking_mode = 1; (void) fcntl(fileno(stdin), F_SETFL, O_NONBLOCK); - fatal_add_cleanup((void (*) (void *)) leave_non_blocking, NULL); } /* @@ -312,6 +314,24 @@ } } +static void +client_global_request_reply(int type, u_int32_t seq, void *ctxt) +{ + server_alive_timeouts = 0; + client_global_request_reply_fwd(type, seq, ctxt); +} + +static void +server_alive_check(void) +{ + if (++server_alive_timeouts > options.server_alive_count_max) + packet_disconnect("Timeout, server not responding."); + packet_start(SSH2_MSG_GLOBAL_REQUEST); + packet_put_cstring("keepalive@openssh.com"); + packet_put_char(1); /* boolean: want reply */ + packet_send(); +} + /* * Waits until the client can do something (some data becomes available on * one of the file descriptors). @@ -321,6 +341,9 @@ client_wait_until_can_do_something(fd_set **readsetp, fd_set **writesetp, int *maxfdp, int *nallocp, int rekeying) { + struct timeval tv, *tvp; + int ret; + /* Add any selections by the channel mechanism. */ channel_prepare_select(readsetp, writesetp, maxfdp, nallocp, rekeying); @@ -362,13 +385,18 @@ /* * Wait for something to happen. This will suspend the process until * some selected descriptor can be read, written, or has some other - * event pending. Note: if you want to implement SSH_MSG_IGNORE - * messages to fool traffic analysis, this might be the place to do - * it: just have a random timeout for the select, and send a random - * SSH_MSG_IGNORE packet when the timeout expires. + * event pending. */ - if (select((*maxfdp)+1, *readsetp, *writesetp, NULL, NULL) < 0) { + if (options.server_alive_interval == 0 || !compat20) + tvp = NULL; + else { + tv.tv_sec = options.server_alive_interval; + tv.tv_usec = 0; + tvp = &tv; + } + ret = select((*maxfdp)+1, *readsetp, *writesetp, NULL, tvp); + if (ret < 0) { char buf[100]; /* @@ -385,7 +413,8 @@ snprintf(buf, sizeof buf, "select: %s\r\n", strerror(errno)); buffer_append(&stderr_buffer, buf, strlen(buf)); quit_pending = 1; - } + } else if (ret == 0) + server_alive_check(); } static void @@ -844,8 +873,7 @@ id, session_ident); channel_cancel_cleanup(id); session_closed = 1; - if (in_raw_mode()) - leave_raw_mode(); + leave_raw_mode(); } /* @@ -1034,12 +1062,19 @@ if (!isatty(fileno(stderr))) unset_nonblock(fileno(stderr)); - if (received_signal) { - if (in_non_blocking_mode) /* XXX */ - leave_non_blocking(); - fatal("Killed by signal %d.", (int) received_signal); + /* + * If there was no shell or command requested, there will be no remote + * exit status to be returned. In that case, clear error code if the + * connection was deliberately terminated at this end. + */ + if (no_shell_flag && received_signal == SIGTERM) { + received_signal = 0; + exit_status = 0; } + if (received_signal) + fatal("Killed by signal %d.", (int) received_signal); + /* * In interactive mode (with pseudo tty) display a message indicating * that the connection has been closed. @@ -1131,6 +1166,46 @@ /* Flag that we want to exit. */ quit_pending = 1; } +static void +client_input_agent_open(int type, u_int32_t seq, void *ctxt) +{ + Channel *c = NULL; + int remote_id, sock; + + /* Read the remote channel number from the message. */ + remote_id = packet_get_int(); + packet_check_eom(); + + /* + * Get a connection to the local authentication agent (this may again + * get forwarded). + */ + sock = ssh_get_authentication_socket(); + + /* + * If we could not connect the agent, send an error message back to + * the server. This should never happen unless the agent dies, + * because authentication forwarding is only enabled if we have an + * agent. + */ + if (sock >= 0) { + c = channel_new("", SSH_CHANNEL_OPEN, sock, sock, + -1, 0, 0, 0, "authentication agent connection", 1); + c->remote_id = remote_id; + c->force_drain = 1; + } + if (c == NULL) { + packet_start(SSH_MSG_CHANNEL_OPEN_FAILURE); + packet_put_int(remote_id); + } else { + /* Send a confirmation to the remote host. */ + debug("Forwarding authentication connection."); + packet_start(SSH_MSG_CHANNEL_OPEN_CONFIRMATION); + packet_put_int(remote_id); + packet_put_int(c->self); + } + packet_send(); +} static Channel * client_request_forwarded_tcpip(const char *request_type, int rchan) @@ -1318,7 +1393,8 @@ rtype = packet_get_string(NULL); want_reply = packet_get_char(); - debug("client_input_global_request: rtype %s want_reply %d", rtype, want_reply); + debug("client_input_global_request: rtype %s want_reply %d", + rtype, want_reply); if (want_reply) { packet_start(success ? SSH2_MSG_REQUEST_SUCCESS : SSH2_MSG_REQUEST_FAILURE); @@ -1366,7 +1442,7 @@ dispatch_set(SSH_SMSG_STDOUT_DATA, &client_input_stdout_data); dispatch_set(SSH_SMSG_AGENT_OPEN, options.forward_agent ? - &auth_input_open_request : &deny_input_open); + &client_input_agent_open : &deny_input_open); dispatch_set(SSH_SMSG_X11_OPEN, options.forward_x11 ? &x11_input_open : &deny_input_open); } @@ -1387,3 +1463,12 @@ else client_init_dispatch_15(); } + +/* client specific fatal cleanup */ +void +cleanup_exit(int i) +{ + leave_raw_mode(); + leave_non_blocking(); + _exit(i); +} diff -ru --new-file openssh-3.7.1p2/clientloop.h openssh-3.8p1/clientloop.h --- openssh-3.7.1p2/clientloop.h 2002-04-23 21:09:46.000000000 +1000 +++ openssh-3.8p1/clientloop.h 2003-12-17 16:33:11.000000000 +1100 @@ -1,4 +1,4 @@ -/* $OpenBSD: clientloop.h,v 1.7 2002/04/22 21:04:52 markus Exp $ */ +/* $OpenBSD: clientloop.h,v 1.8 2003/12/16 15:49:51 markus Exp $ */ /* * Author: Tatu Ylonen @@ -37,4 +37,4 @@ /* Client side main loop for the interactive session. */ int client_loop(int, int, int); -void client_global_request_reply(int type, u_int32_t seq, void *ctxt); +void client_global_request_reply_fwd(int, u_int32_t, void *); Binary files openssh-3.7.1p2/clientloop.o and openssh-3.8p1/clientloop.o differ diff -ru --new-file openssh-3.7.1p2/compat.c openssh-3.8p1/compat.c --- openssh-3.7.1p2/compat.c 2003-09-02 22:52:00.000000000 +1000 +++ openssh-3.8p1/compat.c 2003-11-03 20:09:03.000000000 +1100 @@ -23,7 +23,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: compat.c,v 1.69 2003/08/29 10:03:15 markus Exp $"); +RCSID("$OpenBSD: compat.c,v 1.70 2003/11/02 11:01:03 markus Exp $"); #include "buffer.h" #include "packet.h" @@ -79,11 +79,7 @@ { "OpenSSH_2.5.3*", SSH_BUG_NOREKEY|SSH_BUG_EXTEOF}, { "OpenSSH_2.*," "OpenSSH_3.0*," - "OpenSSH_3.1*", SSH_BUG_EXTEOF|SSH_BUG_GSSAPI_BER}, - { "OpenSSH_3.2*," - "OpenSSH_3.3*," - "OpenSSH_3.4*," - "OpenSSH_3.5*", SSH_BUG_GSSAPI_BER}, + "OpenSSH_3.1*", SSH_BUG_EXTEOF}, { "Sun_SSH_1.0*", SSH_BUG_NOREKEY|SSH_BUG_EXTEOF}, { "OpenSSH*", 0 }, { "*MindTerm*", 0 }, diff -ru --new-file openssh-3.7.1p2/compat.h openssh-3.8p1/compat.h --- openssh-3.7.1p2/compat.h 2003-09-02 22:52:00.000000000 +1000 +++ openssh-3.8p1/compat.h 2003-11-03 20:09:03.000000000 +1100 @@ -1,4 +1,4 @@ -/* $OpenBSD: compat.h,v 1.36 2003/08/29 10:03:15 markus Exp $ */ +/* $OpenBSD: compat.h,v 1.37 2003/11/02 11:01:03 markus Exp $ */ /* * Copyright (c) 1999, 2000, 2001 Markus Friedl. All rights reserved. @@ -55,7 +55,6 @@ #define SSH_BUG_EXTEOF 0x00200000 #define SSH_BUG_PROBE 0x00400000 #define SSH_BUG_FIRSTKEX 0x00800000 -#define SSH_BUG_GSSAPI_BER 0x01000000 void enable_compat13(void); void enable_compat20(void); Binary files openssh-3.7.1p2/compat.o and openssh-3.8p1/compat.o differ diff -ru --new-file openssh-3.7.1p2/compress.c openssh-3.8p1/compress.c --- openssh-3.7.1p2/compress.c 2002-03-22 12:51:25.000000000 +1100 +++ openssh-3.8p1/compress.c 2004-01-21 11:01:23.000000000 +1100 @@ -12,7 +12,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: compress.c,v 1.19 2002/03/18 17:31:54 provos Exp $"); +RCSID("$OpenBSD: compress.c,v 1.21 2004/01/13 19:45:15 markus Exp $"); #include "log.h" #include "buffer.h" @@ -56,12 +56,14 @@ void buffer_compress_uninit(void) { - debug("compress outgoing: raw data %lu, compressed %lu, factor %.2f", - outgoing_stream.total_in, outgoing_stream.total_out, + debug("compress outgoing: raw data %llu, compressed %llu, factor %.2f", + (unsigned long long)outgoing_stream.total_in, + (unsigned long long)outgoing_stream.total_out, outgoing_stream.total_in == 0 ? 0.0 : (double) outgoing_stream.total_out / outgoing_stream.total_in); - debug("compress incoming: raw data %lu, compressed %lu, factor %.2f", - incoming_stream.total_out, incoming_stream.total_in, + debug("compress incoming: raw data %llu, compressed %llu, factor %.2f", + (unsigned long long)incoming_stream.total_out, + (unsigned long long)incoming_stream.total_in, incoming_stream.total_out == 0 ? 0.0 : (double) incoming_stream.total_in / incoming_stream.total_out); if (compress_init_recv_called == 1 && inflate_failed == 0) Binary files openssh-3.7.1p2/compress.o and openssh-3.8p1/compress.o differ diff -ru --new-file openssh-3.7.1p2/config.guess openssh-3.8p1/config.guess --- openssh-3.7.1p2/config.guess 2003-03-21 12:05:38.000000000 +1100 +++ openssh-3.8p1/config.guess 2003-11-21 23:48:55.000000000 +1100 @@ -174,7 +174,7 @@ fi ;; *) - os=netbsd + os=netbsd ;; esac # The OS release @@ -382,23 +382,23 @@ # MiNT. But MiNT is downward compatible to TOS, so this should # be no problem. atarist[e]:*MiNT:*:* | atarist[e]:*mint:*:* | atarist[e]:*TOS:*:*) - echo m68k-atari-mint${UNAME_RELEASE} + echo m68k-atari-mint${UNAME_RELEASE} exit 0 ;; atari*:*MiNT:*:* | atari*:*mint:*:* | atarist[e]:*TOS:*:*) echo m68k-atari-mint${UNAME_RELEASE} - exit 0 ;; + exit 0 ;; *falcon*:*MiNT:*:* | *falcon*:*mint:*:* | *falcon*:*TOS:*:*) - echo m68k-atari-mint${UNAME_RELEASE} + echo m68k-atari-mint${UNAME_RELEASE} exit 0 ;; milan*:*MiNT:*:* | milan*:*mint:*:* | *milan*:*TOS:*:*) - echo m68k-milan-mint${UNAME_RELEASE} - exit 0 ;; + echo m68k-milan-mint${UNAME_RELEASE} + exit 0 ;; hades*:*MiNT:*:* | hades*:*mint:*:* | *hades*:*TOS:*:*) - echo m68k-hades-mint${UNAME_RELEASE} - exit 0 ;; + echo m68k-hades-mint${UNAME_RELEASE} + exit 0 ;; *:*MiNT:*:* | *:*mint:*:* | *:*TOS:*:*) - echo m68k-unknown-mint${UNAME_RELEASE} - exit 0 ;; + echo m68k-unknown-mint${UNAME_RELEASE} + exit 0 ;; powerpc:machten:*:*) echo powerpc-apple-machten${UNAME_RELEASE} exit 0 ;; @@ -462,8 +462,8 @@ echo m88k-motorola-sysv3 exit 0 ;; AViiON:dgux:*:*) - # DG/UX returns AViiON for all architectures - UNAME_PROCESSOR=`/usr/bin/uname -p` + # DG/UX returns AViiON for all architectures + UNAME_PROCESSOR=`/usr/bin/uname -p` if [ $UNAME_PROCESSOR = mc88100 ] || [ $UNAME_PROCESSOR = mc88110 ] then if [ ${TARGET_BINARY_INTERFACE}x = m88kdguxelfx ] || \ @@ -476,7 +476,7 @@ else echo i586-dg-dgux${UNAME_RELEASE} fi - exit 0 ;; + exit 0 ;; M88*:DolphinOS:*:*) # DolphinOS (SVR3) echo m88k-dolphin-sysv3 exit 0 ;; @@ -573,52 +573,52 @@ 9000/[678][0-9][0-9]) if [ -x /usr/bin/getconf ]; then sc_cpu_version=`/usr/bin/getconf SC_CPU_VERSION 2>/dev/null` - sc_kernel_bits=`/usr/bin/getconf SC_KERNEL_BITS 2>/dev/null` - case "${sc_cpu_version}" in - 523) HP_ARCH="hppa1.0" ;; # CPU_PA_RISC1_0 - 528) HP_ARCH="hppa1.1" ;; # CPU_PA_RISC1_1 - 532) # CPU_PA_RISC2_0 - case "${sc_kernel_bits}" in - 32) HP_ARCH="hppa2.0n" ;; - 64) HP_ARCH="hppa2.0w" ;; + sc_kernel_bits=`/usr/bin/getconf SC_KERNEL_BITS 2>/dev/null` + case "${sc_cpu_version}" in + 523) HP_ARCH="hppa1.0" ;; # CPU_PA_RISC1_0 + 528) HP_ARCH="hppa1.1" ;; # CPU_PA_RISC1_1 + 532) # CPU_PA_RISC2_0 + case "${sc_kernel_bits}" in + 32) HP_ARCH="hppa2.0n" ;; + 64) HP_ARCH="hppa2.0w" ;; '') HP_ARCH="hppa2.0" ;; # HP-UX 10.20 - esac ;; - esac + esac ;; + esac fi if [ "${HP_ARCH}" = "" ]; then eval $set_cc_for_build sed 's/^ //' << EOF >$dummy.c - #define _HPUX_SOURCE - #include - #include - - int main () - { - #if defined(_SC_KERNEL_BITS) - long bits = sysconf(_SC_KERNEL_BITS); - #endif - long cpu = sysconf (_SC_CPU_VERSION); - - switch (cpu) - { - case CPU_PA_RISC1_0: puts ("hppa1.0"); break; - case CPU_PA_RISC1_1: puts ("hppa1.1"); break; - case CPU_PA_RISC2_0: - #if defined(_SC_KERNEL_BITS) - switch (bits) - { - case 64: puts ("hppa2.0w"); break; - case 32: puts ("hppa2.0n"); break; - default: puts ("hppa2.0"); break; - } break; - #else /* !defined(_SC_KERNEL_BITS) */ - puts ("hppa2.0"); break; - #endif - default: puts ("hppa1.0"); break; - } - exit (0); - } + #define _HPUX_SOURCE + #include + #include + + int main () + { + #if defined(_SC_KERNEL_BITS) + long bits = sysconf(_SC_KERNEL_BITS); + #endif + long cpu = sysconf (_SC_CPU_VERSION); + + switch (cpu) + { + case CPU_PA_RISC1_0: puts ("hppa1.0"); break; + case CPU_PA_RISC1_1: puts ("hppa1.1"); break; + case CPU_PA_RISC2_0: + #if defined(_SC_KERNEL_BITS) + switch (bits) + { + case 64: puts ("hppa2.0w"); break; + case 32: puts ("hppa2.0n"); break; + default: puts ("hppa2.0"); break; + } break; + #else /* !defined(_SC_KERNEL_BITS) */ + puts ("hppa2.0"); break; + #endif + default: puts ("hppa1.0"); break; + } + exit (0); + } EOF (CCOPTS= $CC_FOR_BUILD $dummy.c -o $dummy 2>/dev/null) && HP_ARCH=`$dummy` if test -z "$HP_ARCH"; then HP_ARCH=hppa; fi @@ -689,22 +689,22 @@ exit 0 ;; C1*:ConvexOS:*:* | convex:ConvexOS:C1*:*) echo c1-convex-bsd - exit 0 ;; + exit 0 ;; C2*:ConvexOS:*:* | convex:ConvexOS:C2*:*) if getsysinfo -f scalar_acc then echo c32-convex-bsd else echo c2-convex-bsd fi - exit 0 ;; + exit 0 ;; C34*:ConvexOS:*:* | convex:ConvexOS:C34*:*) echo c34-convex-bsd - exit 0 ;; + exit 0 ;; C38*:ConvexOS:*:* | convex:ConvexOS:C38*:*) echo c38-convex-bsd - exit 0 ;; + exit 0 ;; C4*:ConvexOS:*:* | convex:ConvexOS:C4*:*) echo c4-convex-bsd - exit 0 ;; + exit 0 ;; CRAY*Y-MP:*:*:*) echo ymp-cray-unicos${UNAME_RELEASE} | sed -e 's/\.[^.]*$/.X/' exit 0 ;; @@ -731,10 +731,10 @@ exit 0 ;; F30[01]:UNIX_System_V:*:* | F700:UNIX_System_V:*:*) FUJITSU_PROC=`uname -m | tr 'ABCDEFGHIJKLMNOPQRSTUVWXYZ' 'abcdefghijklmnopqrstuvwxyz'` - FUJITSU_SYS=`uname -p | tr 'ABCDEFGHIJKLMNOPQRSTUVWXYZ' 'abcdefghijklmnopqrstuvwxyz' | sed -e 's/\///'` - FUJITSU_REL=`echo ${UNAME_RELEASE} | sed -e 's/ /_/'` - echo "${FUJITSU_PROC}-fujitsu-${FUJITSU_SYS}${FUJITSU_REL}" - exit 0 ;; + FUJITSU_SYS=`uname -p | tr 'ABCDEFGHIJKLMNOPQRSTUVWXYZ' 'abcdefghijklmnopqrstuvwxyz' | sed -e 's/\///'` + FUJITSU_REL=`echo ${UNAME_RELEASE} | sed -e 's/ /_/'` + echo "${FUJITSU_PROC}-fujitsu-${FUJITSU_SYS}${FUJITSU_REL}" + exit 0 ;; i*86:BSD/386:*:* | i*86:BSD/OS:*:* | *:Ascend\ Embedded/OS:*:*) echo ${UNAME_MACHINE}-pc-bsdi${UNAME_RELEASE} exit 0 ;; @@ -836,7 +836,7 @@ EV6) UNAME_MACHINE=alphaev6 ;; EV67) UNAME_MACHINE=alphaev67 ;; EV68*) UNAME_MACHINE=alphaev68 ;; - esac + esac objdump --private-headers /bin/sh | grep ld.so.1 >/dev/null if test "$?" = 0 ; then LIBC="libc1" ; else LIBC="" ; fi echo ${UNAME_MACHINE}-unknown-linux-gnu${LIBC} @@ -875,7 +875,7 @@ s/.*supported targets: *// s/ .*// p'` - case "$ld_supported_targets" in + case "$ld_supported_targets" in elf32-i386) TENTATIVE="${UNAME_MACHINE}-pc-linux-gnu" ;; @@ -925,11 +925,11 @@ echo i386-sequent-sysv4 exit 0 ;; i*86:UNIX_SV:4.2MP:2.*) - # Unixware is an offshoot of SVR4, but it has its own version - # number series starting with 2... - # I am not positive that other SVR4 systems won't match this, + # Unixware is an offshoot of SVR4, but it has its own version + # number series starting with 2... + # I am not positive that other SVR4 systems won't match this, # I just have to hope. -- rms. - # Use sysv4.2uw... so that sysv4* matches it. + # Use sysv4.2uw... so that sysv4* matches it. echo ${UNAME_MACHINE}-pc-sysv4.2uw${UNAME_VERSION} exit 0 ;; i*86:*:4.*:* | i*86:SYSTEM_V:4.*:*) @@ -971,10 +971,10 @@ exit 0 ;; pc:*:*:*) # Left here for compatibility: - # uname -m prints for DJGPP always 'pc', but it prints nothing about - # the processor, so we play safe by assuming i386. + # uname -m prints for DJGPP always 'pc', but it prints nothing about + # the processor, so we play safe by assuming i386. echo i386-pc-msdosdjgpp - exit 0 ;; + exit 0 ;; Intel:Mach:3*:*) echo i386-pc-mach3 exit 0 ;; @@ -1003,8 +1003,8 @@ /bin/uname -p 2>/dev/null | /bin/grep entium >/dev/null \ && echo i586-ncr-sysv4.3${OS_REL} && exit 0 ;; 3[34]??:*:4.0:* | 3[34]??,*:*:4.0:*) - /bin/uname -p 2>/dev/null | grep 86 >/dev/null \ - && echo i486-ncr-sysv4 && exit 0 ;; + /bin/uname -p 2>/dev/null | grep 86 >/dev/null \ + && echo i486-ncr-sysv4 && exit 0 ;; m68*:LynxOS:2.*:* | m68*:LynxOS:3.0*:*) echo m68k-unknown-lynxos${UNAME_RELEASE} exit 0 ;; @@ -1041,9 +1041,9 @@ fi exit 0 ;; PENTIUM:*:4.0*:*) # Unisys `ClearPath HMP IX 4000' SVR4/MP effort - # says - echo i586-unisys-sysv4 - exit 0 ;; + # says + echo i586-unisys-sysv4 + exit 0 ;; *:UNIX_System_V:4*:FTX*) # From Gerald Hewes . # How about differentiating between stratus architectures? -djm @@ -1065,11 +1065,11 @@ exit 0 ;; R[34]000:*System_V*:*:* | R4000:UNIX_SYSV:*:* | R*000:UNIX_SV:*:*) if [ -d /usr/nec ]; then - echo mips-nec-sysv${UNAME_RELEASE} + echo mips-nec-sysv${UNAME_RELEASE} else - echo mips-unknown-sysv${UNAME_RELEASE} + echo mips-unknown-sysv${UNAME_RELEASE} fi - exit 0 ;; + exit 0 ;; BeBox:BeOS:*:*) # BeOS running on hardware made by Be, PPC only. echo powerpc-be-beos exit 0 ;; @@ -1179,11 +1179,11 @@ #include printf ("m68k-sony-newsos%s\n", #ifdef NEWSOS4 - "4" + "4" #else "" #endif - ); exit (0); + ); exit (0); #endif #endif diff -ru --new-file openssh-3.7.1p2/config.h openssh-3.8p1/config.h --- openssh-3.7.1p2/config.h 2004-01-02 16:40:03.000000000 +1100 +++ openssh-3.8p1/config.h 1970-01-01 10:00:00.000000000 +1000 @@ -1,1001 +0,0 @@ -/* config.h. Generated automatically by configure. */ -/* config.h.in. Generated automatically from configure.ac by autoheader. */ -/* $Id: acconfig.h,v 1.166 2003/09/16 01:52:19 dtucker Exp $ */ - -/* - * Copyright (c) 1999-2003 Damien Miller. All rights reserved. - * - * Redistribution and use in source and binary forms, with or without - * modification, are permitted provided that the following conditions - * are met: - * 1. Redistributions of source code must retain the above copyright - * notice, this list of conditions and the following disclaimer. - * 2. Redistributions in binary form must reproduce the above copyright - * notice, this list of conditions and the following disclaimer in the - * documentation and/or other materials provided with the distribution. - * - * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR - * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES - * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. - * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, - * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT - * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, - * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY - * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT - * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF - * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. - */ - -#ifndef _CONFIG_H -#define _CONFIG_H - -/* Generated automatically from acconfig.h by autoheader. */ -/* Please make your changes there */ - - - -/* Define if your platform breaks doing a seteuid before a setuid */ -/* #undef SETEUID_BREAKS_SETUID */ - -/* Define if your setreuid() is broken */ -/* #undef BROKEN_SETREUID */ - -/* Define if your setregid() is broken */ -/* #undef BROKEN_SETREGID */ - -/* Define to a Set Process Title type if your system is */ -/* supported by bsd-setproctitle.c */ -#define SPT_TYPE SPT_REUSEARGV -/* #undef SPT_PADCHAR */ - -/* setgroups() NOOP allowed */ -/* #undef SETGROUPS_NOOP */ - -/* SCO workaround */ -/* #undef BROKEN_SYS_TERMIO_H */ - -/* Define if you have SecureWare-based protected password database */ -/* #undef HAVE_SECUREWARE */ - -/* If your header files don't define LOGIN_PROGRAM, then use this (detected) */ -/* from environment and PATH */ -#define LOGIN_PROGRAM_FALLBACK "/bin/login" - -/* Define if your password has a pw_class field */ -/* #undef HAVE_PW_CLASS_IN_PASSWD */ - -/* Define if your password has a pw_expire field */ -/* #undef HAVE_PW_EXPIRE_IN_PASSWD */ - -/* Define if your password has a pw_change field */ -/* #undef HAVE_PW_CHANGE_IN_PASSWD */ - -/* Define if your system uses access rights style file descriptor passing */ -/* #undef HAVE_ACCRIGHTS_IN_MSGHDR */ - -/* Define if your system uses ancillary data style file descriptor passing */ -#define HAVE_CONTROL_IN_MSGHDR 1 - -/* Define if you system's inet_ntoa is busted (e.g. Irix gcc issue) */ -/* #undef BROKEN_INET_NTOA */ - -/* Define if your system defines sys_errlist[] */ -#define HAVE_SYS_ERRLIST 1 - -/* Define if your system defines sys_nerr */ -#define HAVE_SYS_NERR 1 - -/* Define if your system choked on IP TOS setting */ -/* #undef IP_TOS_IS_BROKEN */ - -/* Define if you have the getuserattr function. */ -/* #undef HAVE_GETUSERATTR */ - -/* Work around problematic Linux PAM modules handling of PAM_TTY */ -#define PAM_TTY_KLUDGE 1 - -/* Use PIPES instead of a socketpair() */ -/* #undef USE_PIPES */ - -/* Define if your snprintf is busted */ -/* #undef BROKEN_SNPRINTF */ - -/* Define if you are on Cygwin */ -/* #undef HAVE_CYGWIN */ - -/* Define if you have a broken realpath. */ -/* #undef BROKEN_REALPATH */ - -/* Define if you are on NeXT */ -/* #undef HAVE_NEXT */ - -/* Define if you are on NEWS-OS */ -/* #undef HAVE_NEWS4 */ - -/* Define if you want to enable PAM support */ -/* #undef USE_PAM */ - -/* Define if you want to enable AIX4's authenticate function */ -/* #undef WITH_AIXAUTHENTICATE */ - -/* Define if your AIX loginfailed() function takes 4 arguments (AIX >= 5.2) */ -/* #undef AIX_LOGINFAILED_4ARG */ - -/* Define if you have/want arrays (cluster-wide session managment, not C arrays) */ -/* #undef WITH_IRIX_ARRAY */ - -/* Define if you want IRIX project management */ -/* #undef WITH_IRIX_PROJECT */ - -/* Define if you want IRIX audit trails */ -/* #undef WITH_IRIX_AUDIT */ - -/* Define if you want IRIX kernel jobs */ -/* #undef WITH_IRIX_JOBS */ - -/* Location of PRNGD/EGD random number socket */ -/* #undef PRNGD_SOCKET */ - -/* Port number of PRNGD/EGD random number socket */ -/* #undef PRNGD_PORT */ - -/* Builtin PRNG command timeout */ -#define ENTROPY_TIMEOUT_MSEC 200 - -/* non-privileged user for privilege separation */ -#define SSH_PRIVSEP_USER "sshd" - -/* Define if you want to install preformatted manpages.*/ -/* #undef MANTYPE */ - -/* Define if your ssl headers are included with #include */ -#define HAVE_OPENSSL 1 - -/* Define if you are linking against RSAref. Used only to print the right - * message at run-time. */ -/* #undef RSAREF */ - -/* struct timeval */ -#define HAVE_STRUCT_TIMEVAL 1 - -/* struct utmp and struct utmpx fields */ -#define HAVE_HOST_IN_UTMP 1 -#define HAVE_HOST_IN_UTMPX 1 -#define HAVE_ADDR_IN_UTMP 1 -#define HAVE_ADDR_IN_UTMPX 1 -#define HAVE_ADDR_V6_IN_UTMP 1 -#define HAVE_ADDR_V6_IN_UTMPX 1 -/* #undef HAVE_SYSLEN_IN_UTMPX */ -#define HAVE_PID_IN_UTMP 1 -#define HAVE_TYPE_IN_UTMP 1 -#define HAVE_TYPE_IN_UTMPX 1 -#define HAVE_TV_IN_UTMP 1 -#define HAVE_TV_IN_UTMPX 1 -#define HAVE_ID_IN_UTMP 1 -#define HAVE_ID_IN_UTMPX 1 -#define HAVE_EXIT_IN_UTMP 1 -/* #undef HAVE_TIME_IN_UTMP */ -/* #undef HAVE_TIME_IN_UTMPX */ - -/* Define if you don't want to use your system's login() call */ -/* #undef DISABLE_LOGIN */ - -/* Define if you don't want to use pututline() etc. to write [uw]tmp */ -/* #undef DISABLE_PUTUTLINE */ - -/* Define if you don't want to use pututxline() etc. to write [uw]tmpx */ -/* #undef DISABLE_PUTUTXLINE */ - -/* Define if you don't want to use lastlog */ -/* #undef DISABLE_LASTLOG */ - -/* Define if you don't want to use lastlog in session.c */ -/* #undef NO_SSH_LASTLOG */ - -/* Define if you don't want to use utmp */ -/* #undef DISABLE_UTMP */ - -/* Define if you don't want to use utmpx */ -#define DISABLE_UTMPX 1 - -/* Define if you don't want to use wtmp */ -/* #undef DISABLE_WTMP */ - -/* Define if you don't want to use wtmpx */ -#define DISABLE_WTMPX 1 - -/* Some systems need a utmpx entry for /bin/login to work */ -/* #undef LOGIN_NEEDS_UTMPX */ - -/* Some versions of /bin/login need the TERM supplied on the commandline */ -/* #undef LOGIN_NEEDS_TERM */ - -/* Define if your login program cannot handle end of options ("--") */ -/* #undef LOGIN_NO_ENDOPT */ - -/* Define if you want to specify the path to your lastlog file */ -/* #undef CONF_LASTLOG_FILE */ - -/* Define if you want to specify the path to your utmp file */ -/* #undef CONF_UTMP_FILE */ - -/* Define if you want to specify the path to your wtmp file */ -/* #undef CONF_WTMP_FILE */ - -/* Define if you want to specify the path to your utmpx file */ -/* #undef CONF_UTMPX_FILE */ - -/* Define if you want to specify the path to your wtmpx file */ -/* #undef CONF_WTMPX_FILE */ - -/* Define if you want external askpass support */ -/* #undef USE_EXTERNAL_ASKPASS */ - -/* Define if libc defines __progname */ -#define HAVE___PROGNAME 1 - -/* Define if compiler implements __FUNCTION__ */ -#define HAVE___FUNCTION__ 1 - -/* Define if compiler implements __func__ */ -#define HAVE___func__ 1 - -/* Define this is you want GSSAPI support in the version 2 protocol */ -/* #undef GSSAPI */ - -/* Define if you want Kerberos 5 support */ -/* #undef KRB5 */ - -/* Define this if you are using the Heimdal version of Kerberos V5 */ -/* #undef HEIMDAL */ - -/* Define if you want S/Key support */ -/* #undef SKEY */ - -/* Define if you want TCP Wrappers support */ -/* #undef LIBWRAP */ - -/* Define if your libraries define login() */ -#define HAVE_LOGIN 1 - -/* Define if your libraries define daemon() */ -#define HAVE_DAEMON 1 - -/* Define if your libraries define getpagesize() */ -#define HAVE_GETPAGESIZE 1 - -/* Define if xauth is found in your path */ -#define XAUTH_PATH "/usr/X11R6/bin/xauth" - -/* Define if you want to allow MD5 passwords */ -/* #undef HAVE_MD5_PASSWORDS */ - -/* Define if you want to disable shadow passwords */ -/* #undef DISABLE_SHADOW */ - -/* Define if you want to use shadow password expire field */ -#define HAS_SHADOW_EXPIRE 1 - -/* Define if you have Digital Unix Security Integration Architecture */ -/* #undef HAVE_OSF_SIA */ - -/* Define if you have getpwanam(3) [SunOS 4.x] */ -/* #undef HAVE_GETPWANAM */ - -/* Define if you have an old version of PAM which takes only one argument */ -/* to pam_strerror */ -/* #undef HAVE_OLD_PAM */ - -/* Define if you are using Solaris-derived PAM which passes pam_messages */ -/* to the conversation function with an extra level of indirection */ -/* #undef PAM_SUN_CODEBASE */ - -/* Set this to your mail directory if you don't have maillock.h */ -#define MAIL_DIRECTORY "/var/spool/mail" - -/* Data types */ -#define HAVE_U_INT 1 -#define HAVE_INTXX_T 1 -#define HAVE_U_INTXX_T 1 -#define HAVE_UINTXX_T 1 -#define HAVE_INT64_T 1 -#define HAVE_U_INT64_T 1 -#define HAVE_U_CHAR 1 -#define HAVE_SIZE_T 1 -#define HAVE_SSIZE_T 1 -#define HAVE_CLOCK_T 1 -#define HAVE_MODE_T 1 -#define HAVE_PID_T 1 -#define HAVE_SA_FAMILY_T 1 -#define HAVE_STRUCT_SOCKADDR_STORAGE 1 -#define HAVE_STRUCT_ADDRINFO 1 -#define HAVE_STRUCT_IN6_ADDR 1 -#define HAVE_STRUCT_SOCKADDR_IN6 1 - -/* Fields in struct sockaddr_storage */ -#define HAVE_SS_FAMILY_IN_SS 1 -/* #undef HAVE___SS_FAMILY_IN_SS */ - -/* Define if you have /dev/ptmx */ -/* #undef HAVE_DEV_PTMX */ - -/* Define if you have /dev/ptc */ -/* #undef HAVE_DEV_PTS_AND_PTC */ - -/* Define if you need to use IP address instead of hostname in $DISPLAY */ -/* #undef IPADDR_IN_DISPLAY */ - -/* Specify default $PATH */ -#define USER_PATH "/usr/bin:/bin:/usr/sbin:/sbin:/opt/openssh/bin" - -/* Specify location of ssh.pid */ -#define _PATH_SSH_PIDDIR "/var/run" - -/* getaddrinfo is broken (if present) */ -/* #undef BROKEN_GETADDRINFO */ - -/* Workaround more Linux IPv6 quirks */ -#define DONT_TRY_OTHER_AF 1 - -/* Detect IPv4 in IPv6 mapped addresses and treat as IPv4 */ -#define IPV4_IN_IPV6 1 - -/* Define if you have BSD auth support */ -/* #undef BSD_AUTH */ - -/* Define if X11 doesn't support AF_UNIX sockets on that system */ -/* #undef NO_X11_UNIX_SOCKETS */ - -/* Define if the concept of ports only accessible to superusers isn't known */ -/* #undef NO_IPPORT_RESERVED_CONCEPT */ - -/* Needed for SCO and NeXT */ -/* #undef BROKEN_SAVED_UIDS */ - -/* Define if your system glob() function has the GLOB_ALTDIRFUNC extension */ -#define GLOB_HAS_ALTDIRFUNC 1 - -/* Define if your system glob() function has gl_matchc options in glob_t */ -/* #undef GLOB_HAS_GL_MATCHC */ - -/* Define in your struct dirent expects you to allocate extra space for d_name */ -/* #undef BROKEN_ONE_BYTE_DIRENT_D_NAME */ - -/* Define if your system has /etc/default/login */ -/* #undef HAVE_ETC_DEFAULT_LOGIN */ - -/* Define if your getopt(3) defines and uses optreset */ -/* #undef HAVE_GETOPT_OPTRESET */ - -/* Define on *nto-qnx systems */ -/* #undef MISSING_NFDBITS */ - -/* Define on *nto-qnx systems */ -/* #undef MISSING_HOWMANY */ - -/* Define on *nto-qnx systems */ -/* #undef MISSING_FD_MASK */ - -/* Define if you want smartcard support */ -/* #undef SMARTCARD */ - -/* Define if you want smartcard support using sectok */ -/* #undef USE_SECTOK */ - -/* Define if you want smartcard support using OpenSC */ -/* #undef USE_OPENSC */ - -/* Define if you want to use OpenSSL's internally seeded PRNG only */ -#define OPENSSL_PRNG_ONLY 1 - -/* Define if you shouldn't strip 'tty' from your ttyname in [uw]tmp */ -/* #undef WITH_ABBREV_NO_TTY */ - -/* Define if you want a different $PATH for the superuser */ -/* #undef SUPERUSER_PATH */ - -/* Path that unprivileged child will chroot() to in privep mode */ -/* #undef PRIVSEP_PATH */ - -/* Define if your platform needs to skip post auth file descriptor passing */ -/* #undef DISABLE_FD_PASSING */ - -/* Silly mkstemp() */ -#define HAVE_STRICT_MKSTEMP 1 - -/* Some systems put this outside of libc */ -#define HAVE_NANOSLEEP 1 - -/* Define if sshd somehow reacquires a controlling TTY after setsid() */ -/* #undef SSHD_ACQUIRES_CTTY */ - -/* Define if cmsg_type is not passed correctly */ -/* #undef BROKEN_CMSG_TYPE */ - -/* Strings used in /etc/passwd to denote locked account */ -/* #undef LOCKED_PASSWD_STRING */ -#define LOCKED_PASSWD_PREFIX "!!" -/* #undef LOCKED_PASSWD_SUBSTR */ - -/* Define if DNS support is to be activated */ -/* #undef DNS */ - -/* Define if getrrsetbyname() exists */ -/* #undef HAVE_GETRRSETBYNAME */ - -/* Define if HEADER.ad exists in arpa/nameser.h */ -/* #undef HAVE_HEADER_AD */ - - -/* Define if the `getpgrp' function takes no argument. */ -#define GETPGRP_VOID 1 - -/* Define if you have the `arc4random' function. */ -/* #undef HAVE_ARC4RANDOM */ - -/* Define if you have the `b64_ntop' function. */ -/* #undef HAVE_B64_NTOP */ - -/* Define if you have the `b64_pton' function. */ -/* #undef HAVE_B64_PTON */ - -/* Define if you have the `basename' function. */ -#define HAVE_BASENAME 1 - -/* Define if you have the `bcopy' function. */ -#define HAVE_BCOPY 1 - -/* Define if you have the `bindresvport_sa' function. */ -/* #undef HAVE_BINDRESVPORT_SA */ - -/* Define if you have the header file. */ -/* #undef HAVE_BSTRING_H */ - -/* Define if you have the `clock' function. */ -#define HAVE_CLOCK 1 - -/* Define if gai_strerror() returns const char * */ -#define HAVE_CONST_GAI_STRERROR_PROTO 1 - -/* Define if you have the header file. */ -#define HAVE_CRYPT_H 1 - -/* Define if you have the `dirname' function. */ -#define HAVE_DIRNAME 1 - -/* Define if you have the header file. */ -#define HAVE_ENDIAN_H 1 - -/* Define if you have the `endutent' function. */ -#define HAVE_ENDUTENT 1 - -/* Define if you have the `endutxent' function. */ -#define HAVE_ENDUTXENT 1 - -/* Define if you have the `fchmod' function. */ -#define HAVE_FCHMOD 1 - -/* Define if you have the `fchown' function. */ -#define HAVE_FCHOWN 1 - -/* Define if you have the header file. */ -#define HAVE_FEATURES_H 1 - -/* Define if you have the header file. */ -/* #undef HAVE_FLOATINGPOINT_H */ - -/* Define if you have the `freeaddrinfo' function. */ -#define HAVE_FREEADDRINFO 1 - -/* Define if you have the `futimes' function. */ -/* #undef HAVE_FUTIMES */ - -/* Define if you have the `gai_strerror' function. */ -#define HAVE_GAI_STRERROR 1 - -/* Define if you have the `getaddrinfo' function. */ -#define HAVE_GETADDRINFO 1 - -/* Define if you have the `getcwd' function. */ -#define HAVE_GETCWD 1 - -/* Define if you have the `getgrouplist' function. */ -#define HAVE_GETGROUPLIST 1 - -/* Define if you have the `getluid' function. */ -/* #undef HAVE_GETLUID */ - -/* Define if you have the `getnameinfo' function. */ -#define HAVE_GETNAMEINFO 1 - -/* Define if you have the `getopt' function. */ -#define HAVE_GETOPT 1 - -/* Define if you have the header file. */ -#define HAVE_GETOPT_H 1 - -/* Define if you have the `getpeereid' function. */ -/* #undef HAVE_GETPEEREID */ - -/* Define if you have the `getpwanam' function. */ -/* #undef HAVE_GETPWANAM */ - -/* Define if you have the `getrlimit' function. */ -#define HAVE_GETRLIMIT 1 - -/* Define if you have the `getrusage' function. */ -/* #undef HAVE_GETRUSAGE */ - -/* Define if you have the `gettimeofday' function. */ -#define HAVE_GETTIMEOFDAY 1 - -/* Define if you have the `getttyent' function. */ -#define HAVE_GETTTYENT 1 - -/* Define if you have the `getutent' function. */ -#define HAVE_GETUTENT 1 - -/* Define if you have the `getutid' function. */ -#define HAVE_GETUTID 1 - -/* Define if you have the `getutline' function. */ -#define HAVE_GETUTLINE 1 - -/* Define if you have the `getutxent' function. */ -#define HAVE_GETUTXENT 1 - -/* Define if you have the `getutxid' function. */ -#define HAVE_GETUTXID 1 - -/* Define if you have the `getutxline' function. */ -#define HAVE_GETUTXLINE 1 - -/* Define if you have the `glob' function. */ -#define HAVE_GLOB 1 - -/* Define if you have the header file. */ -#define HAVE_GLOB_H 1 - -/* Define if you have the header file. */ -/* #undef HAVE_GSSAPI_H */ - -/* Define if you have the header file. */ -/* #undef HAVE_IA_H */ - -/* Define if you have the `inet_aton' function. */ -#define HAVE_INET_ATON 1 - -/* Define if you have the `inet_ntoa' function. */ -#define HAVE_INET_NTOA 1 - -/* Define if you have the `inet_ntop' function. */ -#define HAVE_INET_NTOP 1 - -/* Define if you have the `innetgr' function. */ -#define HAVE_INNETGR 1 - -/* Define if you have the header file. */ -#define HAVE_INTTYPES_H 1 - -/* Define if you have the header file. */ -#define HAVE_LASTLOG_H 1 - -/* Define if you have the `crypt' library (-lcrypt). */ -/* #undef HAVE_LIBCRYPT */ - -/* Define if you have the `dl' library (-ldl). */ -/* #undef HAVE_LIBDL */ - -/* Define if you have the header file. */ -#define HAVE_LIBGEN_H 1 - -/* Define if you have the `nsl' library (-lnsl). */ -#define HAVE_LIBNSL 1 - -/* Define if you have the `pam' library (-lpam). */ -/* #undef HAVE_LIBPAM */ - -/* Define if you have the `sectok' library (-lsectok). */ -/* #undef HAVE_LIBSECTOK */ - -/* Define if you have the `socket' library (-lsocket). */ -/* #undef HAVE_LIBSOCKET */ - -/* Define if you have the header file. */ -/* #undef HAVE_LIBUTIL_H */ - -/* Define if you have the `xnet' library (-lxnet). */ -/* #undef HAVE_LIBXNET */ - -/* Define if you have the `z' library (-lz). */ -#define HAVE_LIBZ 1 - -/* Define if you have the header file. */ -#define HAVE_LIMITS_H 1 - -/* Define if you have the header file. */ -/* #undef HAVE_LOGIN_CAP_H */ - -/* Define if you have the `login_getcapbool' function. */ -/* #undef HAVE_LOGIN_GETCAPBOOL */ - -/* Define if you have the header file. */ -/* #undef HAVE_LOGIN_H */ - -/* Define if you have the `logout' function. */ -#define HAVE_LOGOUT 1 - -/* Define if you have the `logwtmp' function. */ -#define HAVE_LOGWTMP 1 - -/* Define if you have the header file. */ -/* #undef HAVE_MAILLOCK_H */ - -/* Define if you have the `md5_crypt' function. */ -/* #undef HAVE_MD5_CRYPT */ - -/* Define if you have the `memmove' function. */ -#define HAVE_MEMMOVE 1 - -/* Define if you have the header file. */ -#define HAVE_MEMORY_H 1 - -/* Define if you have the `mkdtemp' function. */ -#define HAVE_MKDTEMP 1 - -/* Define if you have the `mmap' function. */ -#define HAVE_MMAP 1 - -/* Define if you have the header file. */ -#define HAVE_NETDB_H 1 - -/* Define if you have the header file. */ -/* #undef HAVE_NETGROUP_H */ - -/* Define if you have the header file. */ -#define HAVE_NETINET_IN_SYSTM_H 1 - -/* Define if you have the `ngetaddrinfo' function. */ -/* #undef HAVE_NGETADDRINFO */ - -/* Define if you have the `nsleep' function. */ -/* #undef HAVE_NSLEEP */ - -/* Define if you have the `ogetaddrinfo' function. */ -/* #undef HAVE_OGETADDRINFO */ - -/* Define if you have the `openlog_r' function. */ -/* #undef HAVE_OPENLOG_R */ - -/* Define if you have the `openpty' function. */ -#define HAVE_OPENPTY 1 - -/* Define if you have the `pam_getenvlist' function. */ -/* #undef HAVE_PAM_GETENVLIST */ - -/* Define if you have the `pam_putenv' function. */ -/* #undef HAVE_PAM_PUTENV */ - -/* Define if you have the header file. */ -#define HAVE_PATHS_H 1 - -/* Define if you have the `pstat' function. */ -/* #undef HAVE_PSTAT */ - -/* Define if you have the header file. */ -#define HAVE_PTY_H 1 - -/* Define if you have the `pututline' function. */ -#define HAVE_PUTUTLINE 1 - -/* Define if you have the `pututxline' function. */ -#define HAVE_PUTUTXLINE 1 - -/* Define if you have the `readpassphrase' function. */ -/* #undef HAVE_READPASSPHRASE */ - -/* Define if you have the header file. */ -/* #undef HAVE_READPASSPHRASE_H */ - -/* Define if you have the `realpath' function. */ -#define HAVE_REALPATH 1 - -/* Define if you have the `recvmsg' function. */ -#define HAVE_RECVMSG 1 - -/* Define if you have the header file. */ -#define HAVE_RPC_TYPES_H 1 - -/* Define if you have the `rresvport_af' function. */ -#define HAVE_RRESVPORT_AF 1 - -/* Define if you have the header file. */ -/* #undef HAVE_SECTOK_H */ - -/* Define if you have the header file. */ -#define HAVE_SECURITY_PAM_APPL_H 1 - -/* Define if you have the `sendmsg' function. */ -#define HAVE_SENDMSG 1 - -/* Define if you have the `setauthdb' function. */ -/* #undef HAVE_SETAUTHDB */ - -/* Define if you have the `setdtablesize' function. */ -/* #undef HAVE_SETDTABLESIZE */ - -/* Define if you have the `setegid' function. */ -#define HAVE_SETEGID 1 - -/* Define if you have the `setenv' function. */ -#define HAVE_SETENV 1 - -/* Define if you have the `seteuid' function. */ -#define HAVE_SETEUID 1 - -/* Define if you have the `setgroups' function. */ -#define HAVE_SETGROUPS 1 - -/* Define if you have the `setlogin' function. */ -/* #undef HAVE_SETLOGIN */ - -/* Define if you have the `setluid' function. */ -/* #undef HAVE_SETLUID */ - -/* Define if you have the `setpcred' function. */ -/* #undef HAVE_SETPCRED */ - -/* Define if you have the `setproctitle' function. */ -/* #undef HAVE_SETPROCTITLE */ - -/* Define if you have the `setregid' function. */ -#define HAVE_SETREGID 1 - -/* Define if you have the `setresgid' function. */ -#define HAVE_SETRESGID 1 - -/* Define if you have the `setresuid' function. */ -#define HAVE_SETRESUID 1 - -/* Define if you have the `setreuid' function. */ -#define HAVE_SETREUID 1 - -/* Define if you have the `setrlimit' function. */ -#define HAVE_SETRLIMIT 1 - -/* Define if you have the `setsid' function. */ -#define HAVE_SETSID 1 - -/* Define if you have the `setutent' function. */ -#define HAVE_SETUTENT 1 - -/* Define if you have the `setutxent' function. */ -#define HAVE_SETUTXENT 1 - -/* Define if you have the `setvbuf' function. */ -#define HAVE_SETVBUF 1 - -/* Define if you have the header file. */ -#define HAVE_SHADOW_H 1 - -/* Define if you have the `sigaction' function. */ -#define HAVE_SIGACTION 1 - -/* Define if you have the `sigvec' function. */ -#define HAVE_SIGVEC 1 - -/* Define if the system has the type `sig_atomic_t'. */ -#define HAVE_SIG_ATOMIC_T 1 - -/* Define if you have the `snprintf' function. */ -#define HAVE_SNPRINTF 1 - -/* Define if you have the `socketpair' function. */ -#define HAVE_SOCKETPAIR 1 - -/* Define if you have the header file. */ -#define HAVE_STDDEF_H 1 - -/* Define if you have the header file. */ -#define HAVE_STDINT_H 1 - -/* Define if you have the header file. */ -#define HAVE_STDLIB_H 1 - -/* Define if you have the `strerror' function. */ -#define HAVE_STRERROR 1 - -/* Define if you have the `strftime' function. */ -#define HAVE_STRFTIME 1 - -/* Define if you have the header file. */ -#define HAVE_STRINGS_H 1 - -/* Define if you have the header file. */ -#define HAVE_STRING_H 1 - -/* Define if you have the `strlcat' function. */ -/* #undef HAVE_STRLCAT */ - -/* Define if you have the `strlcpy' function. */ -/* #undef HAVE_STRLCPY */ - -/* Define if you have the `strmode' function. */ -/* #undef HAVE_STRMODE */ - -/* Define if you have the `strnvis' function. */ -/* #undef HAVE_STRNVIS */ - -/* Define if you have the `strsep' function. */ -#define HAVE_STRSEP 1 - -/* Define if `st_blksize' is member of `struct stat'. */ -#define HAVE_STRUCT_STAT_ST_BLKSIZE 1 - -/* Define if the system has the type `struct timespec'. */ -#define HAVE_STRUCT_TIMESPEC 1 - -/* Define if you have the `sysconf' function. */ -#define HAVE_SYSCONF 1 - -/* Define if you have the header file. */ -/* #undef HAVE_SYS_AUDIT_H */ - -/* Define if you have the header file. */ -#define HAVE_SYS_BITYPES_H 1 - -/* Define if you have the header file. */ -/* #undef HAVE_SYS_BSDTTY_H */ - -/* Define if you have the header file. */ -#define HAVE_SYS_CDEFS_H 1 - -/* Define if you have the header file. */ -#define HAVE_SYS_MMAN_H 1 - -/* Define if you have the header file. */ -/* #undef HAVE_SYS_PSTAT_H */ - -/* Define if you have the header file. */ -#define HAVE_SYS_SELECT_H 1 - -/* Define if you have the header file. */ -#define HAVE_SYS_STAT_H 1 - -/* Define if you have the header file. */ -#define HAVE_SYS_STROPTS_H 1 - -/* Define if you have the header file. */ -/* #undef HAVE_SYS_STRTIO_H */ - -/* Define if you have the header file. */ -#define HAVE_SYS_SYSMACROS_H 1 - -/* Define if you have the header file. */ -/* #undef HAVE_SYS_TIMERS_H */ - -/* Define if you have the header file. */ -#define HAVE_SYS_TIME_H 1 - -/* Define if you have the header file. */ -#define HAVE_SYS_TYPES_H 1 - -/* Define if you have the header file. */ -#define HAVE_SYS_UN_H 1 - -/* Define if you have the `tcgetpgrp' function. */ -#define HAVE_TCGETPGRP 1 - -/* Define if you have the `tcsendbreak' function. */ -#define HAVE_TCSENDBREAK 1 - -/* Define if you have the `time' function. */ -#define HAVE_TIME 1 - -/* Define if you have the header file. */ -#define HAVE_TIME_H 1 - -/* Define if you have the header file. */ -/* #undef HAVE_TMPDIR_H */ - -/* Define if you have the `truncate' function. */ -#define HAVE_TRUNCATE 1 - -/* Define if you have the header file. */ -#define HAVE_TTYENT_H 1 - -/* Define if you have the header file. */ -#define HAVE_UNISTD_H 1 - -/* Define if you have the `updwtmp' function. */ -#define HAVE_UPDWTMP 1 - -/* Define if you have the header file. */ -/* #undef HAVE_USERSEC_H */ - -/* Define if you have the header file. */ -/* #undef HAVE_UTIL_H */ - -/* Define if you have the `utimes' function. */ -#define HAVE_UTIMES 1 - -/* Define if you have the header file. */ -#define HAVE_UTIME_H 1 - -/* Define if you have the `utmpname' function. */ -#define HAVE_UTMPNAME 1 - -/* Define if you have the `utmpxname' function. */ -#define HAVE_UTMPXNAME 1 - -/* Define if you have the header file. */ -#define HAVE_UTMPX_H 1 - -/* Define if you have the header file. */ -#define HAVE_UTMP_H 1 - -/* Define if you have the `vhangup' function. */ -#define HAVE_VHANGUP 1 - -/* Define if you have the header file. */ -/* #undef HAVE_VIS_H */ - -/* Define if you have the `vsnprintf' function. */ -#define HAVE_VSNPRINTF 1 - -/* Define if you have the `waitpid' function. */ -#define HAVE_WAITPID 1 - -/* Define if you have the `_getlong' function. */ -/* #undef HAVE__GETLONG */ - -/* Define if you have the `_getpty' function. */ -/* #undef HAVE__GETPTY */ - -/* Define if you have the `_getshort' function. */ -/* #undef HAVE__GETSHORT */ - -/* Define if you have the `__b64_ntop' function. */ -/* #undef HAVE___B64_NTOP */ - -/* Define if you have the `__b64_pton' function. */ -/* #undef HAVE___B64_PTON */ - -/* The size of a `char', as computed by sizeof. */ -#define SIZEOF_CHAR 1 - -/* The size of a `int', as computed by sizeof. */ -#define SIZEOF_INT 4 - -/* The size of a `long int', as computed by sizeof. */ -#define SIZEOF_LONG_INT 4 - -/* The size of a `long long int', as computed by sizeof. */ -#define SIZEOF_LONG_LONG_INT 8 - -/* The size of a `short int', as computed by sizeof. */ -#define SIZEOF_SHORT_INT 2 - -/* Define if you have the ANSI C header files. */ -#define STDC_HEADERS 1 - -/* Define if your processor stores words with the most significant byte first - (like Motorola and SPARC, unlike Intel and VAX). */ -/* #undef WORDS_BIGENDIAN */ - -/* Number of bits in a file offset, on hosts where this is settable. */ -#define _FILE_OFFSET_BITS 64 - -/* Define for large files, on AIX-style hosts. */ -/* #undef _LARGE_FILES */ - -/* Define as `__inline' if that's what the C compiler calls it, or to nothing - if it is not supported. */ -/* #undef inline */ - -/* type to use in place of socklen_t if not defined */ -/* #undef socklen_t */ - -/* ******************* Shouldn't need to edit below this line ************** */ - -#endif /* _CONFIG_H */ diff -ru --new-file openssh-3.7.1p2/config.h.in openssh-3.8p1/config.h.in --- openssh-3.7.1p2/config.h.in 2003-09-23 19:55:07.000000000 +1000 +++ openssh-3.8p1/config.h.in 2004-02-24 17:22:45.000000000 +1100 @@ -1,5 +1,5 @@ /* config.h.in. Generated automatically from configure.ac by autoheader. */ -/* $Id: acconfig.h,v 1.166 2003/09/16 01:52:19 dtucker Exp $ */ +/* $Id: acconfig.h,v 1.173 2004/02/06 05:24:31 dtucker Exp $ */ /* * Copyright (c) 1999-2003 Damien Miller. All rights reserved. @@ -42,6 +42,12 @@ /* Define if your setregid() is broken */ #undef BROKEN_SETREGID +/* Define if your setresuid() is broken */ +#undef BROKEN_SETRESUID + +/* Define if your setresgid() is broken */ +#undef BROKEN_SETRESGID + /* Define to a Set Process Title type if your system is */ /* supported by bsd-setproctitle.c */ #undef SPT_TYPE @@ -60,6 +66,9 @@ /* from environment and PATH */ #undef LOGIN_PROGRAM_FALLBACK +/* Full path of your "passwd" program */ +#undef _PATH_PASSWD_PROG + /* Define if your password has a pw_class field */ #undef HAVE_PW_CLASS_IN_PASSWD @@ -90,6 +99,9 @@ /* Define if you have the getuserattr function. */ #undef HAVE_GETUSERATTR +/* Define if you have the basename function. */ +#undef HAVE_BASENAME + /* Work around problematic Linux PAM modules handling of PAM_TTY */ #undef PAM_TTY_KLUDGE @@ -248,6 +260,9 @@ /* Define this if you are using the Heimdal version of Kerberos V5 */ #undef HEIMDAL +/* Define this if you want to use libkafs' AFS support */ +#undef USE_AFS + /* Define if you want S/Key support */ #undef SKEY @@ -416,15 +431,15 @@ #undef LOCKED_PASSWD_PREFIX #undef LOCKED_PASSWD_SUBSTR -/* Define if DNS support is to be activated */ -#undef DNS - /* Define if getrrsetbyname() exists */ #undef HAVE_GETRRSETBYNAME /* Define if HEADER.ad exists in arpa/nameser.h */ #undef HAVE_HEADER_AD +/* Define if your resolver libs need this for getrrsetbyname */ +#undef BIND_8_COMPAT + /* Define if the `getpgrp' function takes no argument. */ #undef GETPGRP_VOID @@ -438,9 +453,6 @@ /* Define if you have the `b64_pton' function. */ #undef HAVE_B64_PTON -/* Define if you have the `basename' function. */ -#undef HAVE_BASENAME - /* Define if you have the `bcopy' function. */ #undef HAVE_BCOPY @@ -555,9 +567,24 @@ /* Define if you have the header file. */ #undef HAVE_GLOB_H +/* Define if you have the header file. */ +#undef HAVE_GSSAPI_GENERIC_H + +/* Define if you have the header file. */ +#undef HAVE_GSSAPI_GSSAPI_GENERIC_H + +/* Define if you have the header file. */ +#undef HAVE_GSSAPI_GSSAPI_H + +/* Define if you have the header file. */ +#undef HAVE_GSSAPI_GSSAPI_KRB5_H + /* Define if you have the header file. */ #undef HAVE_GSSAPI_H +/* Define if you have the header file. */ +#undef HAVE_GSSAPI_KRB5_H + /* Define if you have the header file. */ #undef HAVE_IA_H @@ -672,6 +699,9 @@ /* Define if you have the `pam_getenvlist' function. */ #undef HAVE_PAM_GETENVLIST +/* Define if you have the header file. */ +#undef HAVE_PAM_PAM_APPL_H + /* Define if you have the `pam_putenv' function. */ #undef HAVE_PAM_PUTENV @@ -828,6 +858,9 @@ /* Define if you have the `strsep' function. */ #undef HAVE_STRSEP +/* Define if you have the `strtoul' function. */ +#undef HAVE_STRTOUL + /* Define if `st_blksize' is member of `struct stat'. */ #undef HAVE_STRUCT_STAT_ST_BLKSIZE @@ -855,12 +888,18 @@ /* Define if you have the header file. */ #undef HAVE_SYS_PSTAT_H +/* Define if you have the header file. */ +#undef HAVE_SYS_PTMS_H + /* Define if you have the header file. */ #undef HAVE_SYS_SELECT_H /* Define if you have the header file. */ #undef HAVE_SYS_STAT_H +/* Define if you have the header file. */ +#undef HAVE_SYS_STREAM_H + /* Define if you have the header file. */ #undef HAVE_SYS_STROPTS_H @@ -909,6 +948,9 @@ /* Define if you have the `updwtmp' function. */ #undef HAVE_UPDWTMP +/* Define if you have the `updwtmpx' function. */ +#undef HAVE_UPDWTMPX + /* Define if you have the header file. */ #undef HAVE_USERSEC_H diff -ru --new-file openssh-3.7.1p2/config.log openssh-3.8p1/config.log --- openssh-3.7.1p2/config.log 2004-01-02 16:41:42.000000000 +1100 +++ openssh-3.8p1/config.log 1970-01-01 10:00:00.000000000 +1000 @@ -1,3406 +0,0 @@ -This file contains any messages produced by compilers while -running configure, to aid debugging if configure makes a mistake. - -It was created by configure, which was -generated by GNU Autoconf 2.52. Invocation command line was - - $ ./configure --with-ssl-dir=/usr/local/ssl --prefix=/opt/openssh --with-ldflags=-L/usr/local/lib - -## ---------- ## -## Platform. ## -## ---------- ## - -hostname = gate -uname -m = i686 -uname -r = 2.4.20-27.8 -uname -s = Linux -uname -v = #1 Thu Dec 11 15:01:15 EST 2003 - -/usr/bin/uname -p = unknown -/bin/uname -X = unknown - -/bin/arch = i686 -/usr/bin/arch -k = unknown -/usr/convex/getsysinfo = unknown -hostinfo = unknown -/bin/machine = unknown -/usr/bin/oslevel = unknown -/bin/universe = unknown - -PATH = /home/dtucker/bin:/usr/local/gcc-3.2.2pp/bin:/usr/local/bin:/usr/kerberos/bin:/usr/local/gcc-3.2.2pp/bin:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin:/opt/openssh/bin:/usr/sbin:/sbin:/usr/X11R6/bin:/usr/local/sbin:/usr/local/avr/bin:/usr/sbin:/sbin:/usr/X11R6/bin:/usr/local/sbin:/usr/local/avr/bin:/usr/sbin:/sbin:/usr/palm/bin - -## ------------ ## -## Core tests. ## -## ------------ ## - -configure:1002: PATH=".;."; conftest.sh -./configure: line 1003: conftest.sh: command not found -configure:1005: $? = 127 -configure:1059: checking for gcc -configure:1074: found /usr/local/gcc-3.2.2pp/bin/gcc -configure:1082: result: gcc -configure:1310: checking for C compiler version -configure:1313: gcc --version &5 -gcc (GCC) 3.3.2 -Copyright (C) 2003 Free Software Foundation, Inc. -This is free software; see the source for copying conditions. There is NO -warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. - -configure:1316: $? = 0 -configure:1318: gcc -v &5 -Reading specs from /usr/local/gcc-3.2.2pp/lib/gcc-lib/i686-pc-linux-gnu/3.3.2/specs -Configured with: ../gcc-3.3.2pp/configure --enable-languages=c,c++ --prefix=/usr/local/gcc-3.2.2pp -Thread model: posix -gcc version 3.3.2 -configure:1321: $? = 0 -configure:1323: gcc -V &5 -gcc: `-V' option must have argument -configure:1326: $? = 1 -configure:1346: checking for C compiler default output -configure:1349: gcc conftest.c >&5 -configure:1352: $? = 0 -configure:1381: result: a.out -configure:1386: checking whether the C compiler works -configure:1392: ./a.out -configure:1395: $? = 0 -configure:1410: result: yes -configure:1417: checking whether we are cross compiling -configure:1419: result: no -configure:1422: checking for executable suffix -configure:1424: gcc -o conftest conftest.c >&5 -configure:1427: $? = 0 -configure:1449: result: -configure:1455: checking for object suffix -configure:1473: gcc -c conftest.c >&5 -configure:1476: $? = 0 -configure:1495: result: o -configure:1499: checking whether we are using the GNU C compiler -configure:1520: gcc -c conftest.c >&5 -configure:1523: $? = 0 -configure:1526: test -s conftest.o -configure:1529: $? = 0 -configure:1541: result: yes -configure:1547: checking whether gcc accepts -g -configure:1565: gcc -c -g conftest.c >&5 -configure:1568: $? = 0 -configure:1571: test -s conftest.o -configure:1574: $? = 0 -configure:1584: result: yes -configure:1611: gcc -c -g -O2 conftest.c >&5 -conftest.c:2: error: parse error before "me" -configure:1614: $? = 1 -configure: failed program was: -#ifndef __cplusplus - choke me -#endif -configure:1743: checking build system type -configure:1761: result: i686-pc-linux-gnu -configure:1768: checking host system type -configure:1782: result: i686-pc-linux-gnu -configure:1789: checking whether byte ordering is bigendian -configure:1814: gcc -c -g -O2 conftest.c >&5 -configure:1817: $? = 0 -configure:1820: test -s conftest.o -configure:1823: $? = 0 -configure:1844: gcc -c -g -O2 conftest.c >&5 -configure: In function `main': -configure:1835: error: `not' undeclared (first use in this function) -configure:1835: error: (Each undeclared identifier is reported only once -configure:1835: error: for each function it appears in.) -configure:1835: error: parse error before "big" -configure:1847: $? = 1 -configure: failed program was: -#line 1827 "configure" -#include "confdefs.h" -#include -#include - -int -main () -{ -#if BYTE_ORDER != BIG_ENDIAN - not big endian -#endif - - ; - return 0; -} -configure:1911: result: no -configure:1926: checking for mawk -configure:1952: result: no -configure:1926: checking for gawk -configure:1941: found /usr/bin/gawk -configure:1949: result: gawk -configure:1964: checking how to run the C preprocessor -configure:1990: gcc -E conftest.c -configure:1996: $? = 0 -configure:2023: gcc -E conftest.c -configure:2020:28: ac_nonexistent.h: No such file or directory -configure:2029: $? = 1 -configure: failed program was: -#line 2019 "configure" -#include "confdefs.h" -#include -configure:2066: result: gcc -E -configure:2081: gcc -E conftest.c -configure:2087: $? = 0 -configure:2114: gcc -E conftest.c -configure:2111:28: ac_nonexistent.h: No such file or directory -configure:2120: $? = 1 -configure: failed program was: -#line 2110 "configure" -#include "confdefs.h" -#include -configure:2197: checking for ranlib -configure:2212: found /usr/local/bin/ranlib -configure:2221: result: ranlib -configure:2245: checking for a BSD compatible install -configure:2294: result: /usr/bin/install -c -configure:2307: checking for ar -configure:2324: found /usr/local/bin/ar -configure:2335: result: /usr/local/bin/ar -configure:2346: checking for perl5 -configure:2377: result: no -configure:2346: checking for perl -configure:2363: found /usr/local/bin/perl -configure:2374: result: /usr/local/bin/perl -configure:2386: checking for sed -configure:2403: found /bin/sed -configure:2414: result: /bin/sed -configure:2423: checking for ent -configure:2454: result: no -configure:2460: checking for bash -configure:2477: found /bin/bash -configure:2488: result: /bin/bash -configure:2497: checking for ksh -configure:2525: result: /bin/bash -configure:2534: checking for sh -configure:2562: result: /bin/bash -configure:2571: checking for sh -configure:2588: found /bin/sh -configure:2599: result: /bin/sh -configure:2614: checking for special C compiler options needed for large files -configure:2688: result: no -configure:2694: checking for _FILE_OFFSET_BITS value needed for large files -configure:2722: gcc -c -g -O2 conftest.c >&5 -configure:2709: warning: left shift count >= width of type -configure:2709: warning: left shift count >= width of type -configure:2711: error: size of array `off_t_is_large' is negative -configure:2725: $? = 1 -configure: failed program was: -#line 2702 "configure" -#include "confdefs.h" -#include - /* Check that off_t can represent 2**63 - 1 correctly. - We can't simply define LARGE_OFF_T to be 9223372036854775807, - since some C++ compilers masquerading as C compilers - incorrectly reject 9223372036854775807. */ -#define LARGE_OFF_T (((off_t) 1 << 62) - 1 + ((off_t) 1 << 62)) - int off_t_is_large[(LARGE_OFF_T % 2147483629 == 721 - && LARGE_OFF_T % 2147483647 == 1) - ? 1 : -1]; -int -main () -{ - - ; - return 0; -} -configure:2761: gcc -c -g -O2 conftest.c >&5 -configure:2764: $? = 0 -configure:2767: test -s conftest.o -configure:2770: $? = 0 -configure:2781: result: 64 -configure:2791: checking for _LARGE_FILES value needed for large files -configure:2819: gcc -c -g -O2 conftest.c >&5 -configure:2822: $? = 0 -configure:2825: test -s conftest.o -configure:2828: $? = 0 -configure:2878: result: no -configure:2906: checking for login -configure:2923: found /bin/login -configure:2934: result: /bin/login -configure:2953: checking for gcc option to accept ANSI C -configure:3010: gcc -c -g -O2 conftest.c >&5 -configure:3013: $? = 0 -configure:3016: test -s conftest.o -configure:3019: $? = 0 -configure:3036: result: none needed -configure:3044: checking for inline -configure:3061: gcc -c -g -O2 conftest.c >&5 -configure:3064: $? = 0 -configure:3067: test -s conftest.o -configure:3070: $? = 0 -configure:3081: result: inline -configure:4691: checking compiler and flags for sanity -configure:4707: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c >&5 -configure: In function `main': -configure:4702: warning: implicit declaration of function `exit' -configure:4710: $? = 0 -configure:4712: ./conftest -configure:4715: $? = 0 -configure:4717: result: yes -configure:4748: checking for bstring.h -configure:4758: gcc -E conftest.c -configure:4755:21: bstring.h: No such file or directory -configure:4764: $? = 1 -configure: failed program was: -#line 4754 "configure" -#include "confdefs.h" -#include -configure:4783: result: no -configure:4748: checking for crypt.h -configure:4758: gcc -E conftest.c -configure:4764: $? = 0 -configure:4783: result: yes -configure:4748: checking for endian.h -configure:4758: gcc -E conftest.c -configure:4764: $? = 0 -configure:4783: result: yes -configure:4748: checking for features.h -configure:4758: gcc -E conftest.c -configure:4764: $? = 0 -configure:4783: result: yes -configure:4748: checking for floatingpoint.h -configure:4758: gcc -E conftest.c -configure:4755:27: floatingpoint.h: No such file or directory -configure:4764: $? = 1 -configure: failed program was: -#line 4754 "configure" -#include "confdefs.h" -#include -configure:4783: result: no -configure:4748: checking for getopt.h -configure:4758: gcc -E conftest.c -configure:4764: $? = 0 -configure:4783: result: yes -configure:4748: checking for glob.h -configure:4758: gcc -E conftest.c -configure:4764: $? = 0 -configure:4783: result: yes -configure:4748: checking for ia.h -configure:4758: gcc -E conftest.c -configure:4755:16: ia.h: No such file or directory -configure:4764: $? = 1 -configure: failed program was: -#line 4754 "configure" -#include "confdefs.h" -#include -configure:4783: result: no -configure:4748: checking for lastlog.h -configure:4758: gcc -E conftest.c -configure:4764: $? = 0 -configure:4783: result: yes -configure:4748: checking for limits.h -configure:4758: gcc -E conftest.c -configure:4764: $? = 0 -configure:4783: result: yes -configure:4748: checking for login.h -configure:4758: gcc -E conftest.c -configure:4755:19: login.h: No such file or directory -configure:4764: $? = 1 -configure: failed program was: -#line 4754 "configure" -#include "confdefs.h" -#include -configure:4783: result: no -configure:4748: checking for login_cap.h -configure:4758: gcc -E conftest.c -configure:4755:23: login_cap.h: No such file or directory -configure:4764: $? = 1 -configure: failed program was: -#line 4754 "configure" -#include "confdefs.h" -#include -configure:4783: result: no -configure:4748: checking for maillock.h -configure:4758: gcc -E conftest.c -configure:4755:22: maillock.h: No such file or directory -configure:4764: $? = 1 -configure: failed program was: -#line 4754 "configure" -#include "confdefs.h" -#include -configure:4783: result: no -configure:4748: checking for netdb.h -configure:4758: gcc -E conftest.c -configure:4764: $? = 0 -configure:4783: result: yes -configure:4748: checking for netgroup.h -configure:4758: gcc -E conftest.c -configure:4755:22: netgroup.h: No such file or directory -configure:4764: $? = 1 -configure: failed program was: -#line 4754 "configure" -#include "confdefs.h" -#include -configure:4783: result: no -configure:4748: checking for netinet/in_systm.h -configure:4758: gcc -E conftest.c -configure:4764: $? = 0 -configure:4783: result: yes -configure:4748: checking for paths.h -configure:4758: gcc -E conftest.c -configure:4764: $? = 0 -configure:4783: result: yes -configure:4748: checking for pty.h -configure:4758: gcc -E conftest.c -configure:4764: $? = 0 -configure:4783: result: yes -configure:4748: checking for readpassphrase.h -configure:4758: gcc -E conftest.c -configure:4755:28: readpassphrase.h: No such file or directory -configure:4764: $? = 1 -configure: failed program was: -#line 4754 "configure" -#include "confdefs.h" -#include -configure:4783: result: no -configure:4748: checking for rpc/types.h -configure:4758: gcc -E conftest.c -configure:4764: $? = 0 -configure:4783: result: yes -configure:4748: checking for security/pam_appl.h -configure:4758: gcc -E conftest.c -configure:4764: $? = 0 -configure:4783: result: yes -configure:4748: checking for shadow.h -configure:4758: gcc -E conftest.c -configure:4764: $? = 0 -configure:4783: result: yes -configure:4748: checking for stddef.h -configure:4758: gcc -E conftest.c -configure:4764: $? = 0 -configure:4783: result: yes -configure:4748: checking for stdint.h -configure:4758: gcc -E conftest.c -configure:4764: $? = 0 -configure:4783: result: yes -configure:4748: checking for strings.h -configure:4758: gcc -E conftest.c -configure:4764: $? = 0 -configure:4783: result: yes -configure:4748: checking for sys/strtio.h -configure:4758: gcc -E conftest.c -configure:4755:24: sys/strtio.h: No such file or directory -configure:4764: $? = 1 -configure: failed program was: -#line 4754 "configure" -#include "confdefs.h" -#include -configure:4783: result: no -configure:4748: checking for sys/audit.h -configure:4758: gcc -E conftest.c -configure:4755:23: sys/audit.h: No such file or directory -configure:4764: $? = 1 -configure: failed program was: -#line 4754 "configure" -#include "confdefs.h" -#include -configure:4783: result: no -configure:4748: checking for sys/bitypes.h -configure:4758: gcc -E conftest.c -configure:4764: $? = 0 -configure:4783: result: yes -configure:4748: checking for sys/bsdtty.h -configure:4758: gcc -E conftest.c -configure:4755:24: sys/bsdtty.h: No such file or directory -configure:4764: $? = 1 -configure: failed program was: -#line 4754 "configure" -#include "confdefs.h" -#include -configure:4783: result: no -configure:4748: checking for sys/cdefs.h -configure:4758: gcc -E conftest.c -configure:4764: $? = 0 -configure:4783: result: yes -configure:4748: checking for sys/mman.h -configure:4758: gcc -E conftest.c -configure:4764: $? = 0 -configure:4783: result: yes -configure:4748: checking for sys/pstat.h -configure:4758: gcc -E conftest.c -configure:4755:23: sys/pstat.h: No such file or directory -configure:4764: $? = 1 -configure: failed program was: -#line 4754 "configure" -#include "confdefs.h" -#include -configure:4783: result: no -configure:4748: checking for sys/select.h -configure:4758: gcc -E conftest.c -configure:4764: $? = 0 -configure:4783: result: yes -configure:4748: checking for sys/stat.h -configure:4758: gcc -E conftest.c -configure:4764: $? = 0 -configure:4783: result: yes -configure:4748: checking for sys/stropts.h -configure:4758: gcc -E conftest.c -configure:4764: $? = 0 -configure:4783: result: yes -configure:4748: checking for sys/sysmacros.h -configure:4758: gcc -E conftest.c -configure:4764: $? = 0 -configure:4783: result: yes -configure:4748: checking for sys/time.h -configure:4758: gcc -E conftest.c -configure:4764: $? = 0 -configure:4783: result: yes -configure:4748: checking for sys/timers.h -configure:4758: gcc -E conftest.c -configure:4755:24: sys/timers.h: No such file or directory -configure:4764: $? = 1 -configure: failed program was: -#line 4754 "configure" -#include "confdefs.h" -#include -configure:4783: result: no -configure:4748: checking for sys/un.h -configure:4758: gcc -E conftest.c -configure:4764: $? = 0 -configure:4783: result: yes -configure:4748: checking for time.h -configure:4758: gcc -E conftest.c -configure:4764: $? = 0 -configure:4783: result: yes -configure:4748: checking for tmpdir.h -configure:4758: gcc -E conftest.c -configure:4755:20: tmpdir.h: No such file or directory -configure:4764: $? = 1 -configure: failed program was: -#line 4754 "configure" -#include "confdefs.h" -#include -configure:4783: result: no -configure:4748: checking for ttyent.h -configure:4758: gcc -E conftest.c -configure:4764: $? = 0 -configure:4783: result: yes -configure:4748: checking for usersec.h -configure:4758: gcc -E conftest.c -configure:4755:21: usersec.h: No such file or directory -configure:4764: $? = 1 -configure: failed program was: -#line 4754 "configure" -#include "confdefs.h" -#include -configure:4783: result: no -configure:4748: checking for util.h -configure:4758: gcc -E conftest.c -configure:4755:18: util.h: No such file or directory -configure:4764: $? = 1 -configure: failed program was: -#line 4754 "configure" -#include "confdefs.h" -#include -configure:4783: result: no -configure:4748: checking for utime.h -configure:4758: gcc -E conftest.c -configure:4764: $? = 0 -configure:4783: result: yes -configure:4748: checking for utmp.h -configure:4758: gcc -E conftest.c -configure:4764: $? = 0 -configure:4783: result: yes -configure:4748: checking for utmpx.h -configure:4758: gcc -E conftest.c -configure:4764: $? = 0 -configure:4783: result: yes -configure:4748: checking for vis.h -configure:4758: gcc -E conftest.c -configure:4755:17: vis.h: No such file or directory -configure:4764: $? = 1 -configure: failed program was: -#line 4754 "configure" -#include "confdefs.h" -#include -configure:4783: result: no -configure:4794: checking for yp_match -configure:4831: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c >&5 -/tmp/ccPJpHfi.o: In function `main': -/home/dtucker/openssh/portable/openssh-3.7.1p2/configure:4822: undefined reference to `yp_match' -collect2: ld returned 1 exit status -configure:4834: $? = 1 -configure: failed program was: -#line 4800 "configure" -#include "confdefs.h" -/* System header to define __stub macros and hopefully few prototypes, - which can conflict with char yp_match (); below. */ -#include -/* Override any gcc2 internal prototype to avoid an error. */ -#ifdef __cplusplus -extern "C" -#endif -/* We use char because int might match the return type of a gcc2 - builtin and then its argument prototype would still apply. */ -char yp_match (); -char (*f) (); - -int -main () -{ -/* The GNU C library defines this for functions which it implements - to always fail with ENOSYS. Some functions are actually named - something starting with __ and the normal name is an alias. */ -#if defined (__stub_yp_match) || defined (__stub___yp_match) -choke me -#else -f = yp_match; -#endif - - ; - return 0; -} -configure:4850: result: no -configure:4856: checking for yp_match in -lnsl -configure:4883: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lnsl >&5 -configure:4886: $? = 0 -configure:4889: test -s conftest -configure:4892: $? = 0 -configure:4903: result: yes -configure:4916: checking for setsockopt -configure:4953: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lnsl >&5 -configure:4956: $? = 0 -configure:4959: test -s conftest -configure:4962: $? = 0 -configure:4972: result: yes -configure:5099: checking for dirname -configure:5136: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lnsl >&5 -configure:5139: $? = 0 -configure:5142: test -s conftest -configure:5145: $? = 0 -configure:5155: result: yes -configure:5165: checking for libgen.h -configure:5175: gcc -E conftest.c -configure:5181: $? = 0 -configure:5200: result: yes -configure:5383: checking for getspnam -configure:5420: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lnsl >&5 -configure:5423: $? = 0 -configure:5426: test -s conftest -configure:5429: $? = 0 -configure:5439: result: yes -configure:5499: checking for library containing basename -configure:5526: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lnsl >&5 -configure:5529: $? = 0 -configure:5532: test -s conftest -configure:5535: $? = 0 -configure:5588: result: none required -configure:5641: checking for deflate in -lz -configure:5668: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lz -lnsl >&5 -configure:5671: $? = 0 -configure:5674: test -s conftest -configure:5677: $? = 0 -configure:5688: result: yes -configure:5703: checking for strcasecmp -configure:5740: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lz -lnsl >&5 -configure:5743: $? = 0 -configure:5746: test -s conftest -configure:5749: $? = 0 -configure:5759: result: yes -configure:5819: checking for utimes -configure:5856: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lz -lnsl >&5 -configure:5859: $? = 0 -configure:5862: test -s conftest -configure:5865: $? = 0 -configure:5875: result: yes -configure:5942: checking for libutil.h -configure:5952: gcc -E conftest.c -configure:5949:21: libutil.h: No such file or directory -configure:5958: $? = 1 -configure: failed program was: -#line 5948 "configure" -#include "confdefs.h" -#include -configure:5977: result: no -configure:5987: checking for library containing login -configure:6014: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lz -lnsl >&5 -/tmp/ccQ3WSNW.o: In function `main': -/home/dtucker/openssh/portable/openssh-3.7.1p2/configure:6007: undefined reference to `login' -collect2: ld returned 1 exit status -configure:6017: $? = 1 -configure: failed program was: -#line 5995 "configure" -#include "confdefs.h" - -/* Override any gcc2 internal prototype to avoid an error. */ -#ifdef __cplusplus -extern "C" -#endif -/* We use char because int might match the return type of a gcc2 - builtin and then its argument prototype would still apply. */ -char login (); -int -main () -{ -login (); - ; - return 0; -} -configure:6054: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6057: $? = 0 -configure:6060: test -s conftest -configure:6063: $? = 0 -configure:6076: result: -lutil -configure:6089: checking for logout -configure:6126: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6129: $? = 0 -configure:6132: test -s conftest -configure:6135: $? = 0 -configure:6145: result: yes -configure:6089: checking for updwtmp -configure:6126: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6129: $? = 0 -configure:6132: test -s conftest -configure:6135: $? = 0 -configure:6145: result: yes -configure:6089: checking for logwtmp -configure:6126: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6129: $? = 0 -configure:6132: test -s conftest -configure:6135: $? = 0 -configure:6145: result: yes -configure:6158: checking for strftime -configure:6195: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6198: $? = 0 -configure:6201: test -s conftest -configure:6204: $? = 0 -configure:6214: result: yes -configure:6284: checking for GLOB_ALTDIRFUNC support -configure:6303: result: yes -configure:6315: checking for gl_matchc field in glob_t -configure:6337: result: no -configure:6343: checking whether struct dirent allocates space for d_name -configure:6360: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure: In function `main': -configure:6355: warning: implicit declaration of function `exit' -configure:6363: $? = 0 -configure:6365: ./conftest -configure:6368: $? = 0 -configure:6370: result: yes -configure:6557: checking for arc4random -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -/tmp/cc0HwRR0.o: In function `main': -/home/dtucker/openssh/portable/openssh-3.7.1p2/configure:6585: undefined reference to `arc4random' -collect2: ld returned 1 exit status -configure:6597: $? = 1 -configure: failed program was: -#line 6563 "configure" -#include "confdefs.h" -/* System header to define __stub macros and hopefully few prototypes, - which can conflict with char arc4random (); below. */ -#include -/* Override any gcc2 internal prototype to avoid an error. */ -#ifdef __cplusplus -extern "C" -#endif -/* We use char because int might match the return type of a gcc2 - builtin and then its argument prototype would still apply. */ -char arc4random (); -char (*f) (); - -int -main () -{ -/* The GNU C library defines this for functions which it implements - to always fail with ENOSYS. Some functions are actually named - something starting with __ and the normal name is an alias. */ -#if defined (__stub_arc4random) || defined (__stub___arc4random) -choke me -#else -f = arc4random; -#endif - - ; - return 0; -} -configure:6613: result: no -configure:6557: checking for __b64_ntop -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -/tmp/ccsnfFrj.o: In function `main': -/home/dtucker/openssh/portable/openssh-3.7.1p2/configure:6585: undefined reference to `__b64_ntop' -collect2: ld returned 1 exit status -configure:6597: $? = 1 -configure: failed program was: -#line 6563 "configure" -#include "confdefs.h" -/* System header to define __stub macros and hopefully few prototypes, - which can conflict with char __b64_ntop (); below. */ -#include -/* Override any gcc2 internal prototype to avoid an error. */ -#ifdef __cplusplus -extern "C" -#endif -/* We use char because int might match the return type of a gcc2 - builtin and then its argument prototype would still apply. */ -char __b64_ntop (); -char (*f) (); - -int -main () -{ -/* The GNU C library defines this for functions which it implements - to always fail with ENOSYS. Some functions are actually named - something starting with __ and the normal name is an alias. */ -#if defined (__stub___b64_ntop) || defined (__stub_____b64_ntop) -choke me -#else -f = __b64_ntop; -#endif - - ; - return 0; -} -configure:6613: result: no -configure:6557: checking for b64_ntop -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -/tmp/ccwBgi7U.o: In function `main': -/home/dtucker/openssh/portable/openssh-3.7.1p2/configure:6585: undefined reference to `b64_ntop' -collect2: ld returned 1 exit status -configure:6597: $? = 1 -configure: failed program was: -#line 6563 "configure" -#include "confdefs.h" -/* System header to define __stub macros and hopefully few prototypes, - which can conflict with char b64_ntop (); below. */ -#include -/* Override any gcc2 internal prototype to avoid an error. */ -#ifdef __cplusplus -extern "C" -#endif -/* We use char because int might match the return type of a gcc2 - builtin and then its argument prototype would still apply. */ -char b64_ntop (); -char (*f) (); - -int -main () -{ -/* The GNU C library defines this for functions which it implements - to always fail with ENOSYS. Some functions are actually named - something starting with __ and the normal name is an alias. */ -#if defined (__stub_b64_ntop) || defined (__stub___b64_ntop) -choke me -#else -f = b64_ntop; -#endif - - ; - return 0; -} -configure:6613: result: no -configure:6557: checking for __b64_pton -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -/tmp/ccyWzOXz.o: In function `main': -/home/dtucker/openssh/portable/openssh-3.7.1p2/configure:6585: undefined reference to `__b64_pton' -collect2: ld returned 1 exit status -configure:6597: $? = 1 -configure: failed program was: -#line 6563 "configure" -#include "confdefs.h" -/* System header to define __stub macros and hopefully few prototypes, - which can conflict with char __b64_pton (); below. */ -#include -/* Override any gcc2 internal prototype to avoid an error. */ -#ifdef __cplusplus -extern "C" -#endif -/* We use char because int might match the return type of a gcc2 - builtin and then its argument prototype would still apply. */ -char __b64_pton (); -char (*f) (); - -int -main () -{ -/* The GNU C library defines this for functions which it implements - to always fail with ENOSYS. Some functions are actually named - something starting with __ and the normal name is an alias. */ -#if defined (__stub___b64_pton) || defined (__stub_____b64_pton) -choke me -#else -f = __b64_pton; -#endif - - ; - return 0; -} -configure:6613: result: no -configure:6557: checking for b64_pton -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -/tmp/ccS6C9Hb.o: In function `main': -/home/dtucker/openssh/portable/openssh-3.7.1p2/configure:6585: undefined reference to `b64_pton' -collect2: ld returned 1 exit status -configure:6597: $? = 1 -configure: failed program was: -#line 6563 "configure" -#include "confdefs.h" -/* System header to define __stub macros and hopefully few prototypes, - which can conflict with char b64_pton (); below. */ -#include -/* Override any gcc2 internal prototype to avoid an error. */ -#ifdef __cplusplus -extern "C" -#endif -/* We use char because int might match the return type of a gcc2 - builtin and then its argument prototype would still apply. */ -char b64_pton (); -char (*f) (); - -int -main () -{ -/* The GNU C library defines this for functions which it implements - to always fail with ENOSYS. Some functions are actually named - something starting with __ and the normal name is an alias. */ -#if defined (__stub_b64_pton) || defined (__stub___b64_pton) -choke me -#else -f = b64_pton; -#endif - - ; - return 0; -} -configure:6613: result: no -configure:6557: checking for basename -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for bcopy -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for bindresvport_sa -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -/tmp/ccWHTqnM.o: In function `main': -/home/dtucker/openssh/portable/openssh-3.7.1p2/configure:6585: undefined reference to `bindresvport_sa' -collect2: ld returned 1 exit status -configure:6597: $? = 1 -configure: failed program was: -#line 6563 "configure" -#include "confdefs.h" -/* System header to define __stub macros and hopefully few prototypes, - which can conflict with char bindresvport_sa (); below. */ -#include -/* Override any gcc2 internal prototype to avoid an error. */ -#ifdef __cplusplus -extern "C" -#endif -/* We use char because int might match the return type of a gcc2 - builtin and then its argument prototype would still apply. */ -char bindresvport_sa (); -char (*f) (); - -int -main () -{ -/* The GNU C library defines this for functions which it implements - to always fail with ENOSYS. Some functions are actually named - something starting with __ and the normal name is an alias. */ -#if defined (__stub_bindresvport_sa) || defined (__stub___bindresvport_sa) -choke me -#else -f = bindresvport_sa; -#endif - - ; - return 0; -} -configure:6613: result: no -configure:6557: checking for clock -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for fchmod -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for fchown -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for freeaddrinfo -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for futimes -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure: In function `main': -configure:6583: error: `choke' undeclared (first use in this function) -configure:6583: error: (Each undeclared identifier is reported only once -configure:6583: error: for each function it appears in.) -configure:6583: error: parse error before "me" -configure:6597: $? = 1 -configure: failed program was: -#line 6563 "configure" -#include "confdefs.h" -/* System header to define __stub macros and hopefully few prototypes, - which can conflict with char futimes (); below. */ -#include -/* Override any gcc2 internal prototype to avoid an error. */ -#ifdef __cplusplus -extern "C" -#endif -/* We use char because int might match the return type of a gcc2 - builtin and then its argument prototype would still apply. */ -char futimes (); -char (*f) (); - -int -main () -{ -/* The GNU C library defines this for functions which it implements - to always fail with ENOSYS. Some functions are actually named - something starting with __ and the normal name is an alias. */ -#if defined (__stub_futimes) || defined (__stub___futimes) -choke me -#else -f = futimes; -#endif - - ; - return 0; -} -configure:6613: result: no -configure:6557: checking for getaddrinfo -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for getcwd -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for getgrouplist -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for getnameinfo -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for getopt -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for getpeereid -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -/tmp/ccGZSPOG.o: In function `main': -/home/dtucker/openssh/portable/openssh-3.7.1p2/configure:6585: undefined reference to `getpeereid' -collect2: ld returned 1 exit status -configure:6597: $? = 1 -configure: failed program was: -#line 6563 "configure" -#include "confdefs.h" -/* System header to define __stub macros and hopefully few prototypes, - which can conflict with char getpeereid (); below. */ -#include -/* Override any gcc2 internal prototype to avoid an error. */ -#ifdef __cplusplus -extern "C" -#endif -/* We use char because int might match the return type of a gcc2 - builtin and then its argument prototype would still apply. */ -char getpeereid (); -char (*f) (); - -int -main () -{ -/* The GNU C library defines this for functions which it implements - to always fail with ENOSYS. Some functions are actually named - something starting with __ and the normal name is an alias. */ -#if defined (__stub_getpeereid) || defined (__stub___getpeereid) -choke me -#else -f = getpeereid; -#endif - - ; - return 0; -} -configure:6613: result: no -configure:6557: checking for _getpty -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -/tmp/cci1WFci.o: In function `main': -/home/dtucker/openssh/portable/openssh-3.7.1p2/configure:6585: undefined reference to `_getpty' -collect2: ld returned 1 exit status -configure:6597: $? = 1 -configure: failed program was: -#line 6563 "configure" -#include "confdefs.h" -/* System header to define __stub macros and hopefully few prototypes, - which can conflict with char _getpty (); below. */ -#include -/* Override any gcc2 internal prototype to avoid an error. */ -#ifdef __cplusplus -extern "C" -#endif -/* We use char because int might match the return type of a gcc2 - builtin and then its argument prototype would still apply. */ -char _getpty (); -char (*f) (); - -int -main () -{ -/* The GNU C library defines this for functions which it implements - to always fail with ENOSYS. Some functions are actually named - something starting with __ and the normal name is an alias. */ -#if defined (__stub__getpty) || defined (__stub____getpty) -choke me -#else -f = _getpty; -#endif - - ; - return 0; -} -configure:6613: result: no -configure:6557: checking for getrlimit -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for getttyent -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for glob -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for inet_aton -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for inet_ntoa -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for inet_ntop -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for innetgr -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for login_getcapbool -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -/tmp/ccSmf9dD.o: In function `main': -/home/dtucker/openssh/portable/openssh-3.7.1p2/configure:6585: undefined reference to `login_getcapbool' -collect2: ld returned 1 exit status -configure:6597: $? = 1 -configure: failed program was: -#line 6563 "configure" -#include "confdefs.h" -/* System header to define __stub macros and hopefully few prototypes, - which can conflict with char login_getcapbool (); below. */ -#include -/* Override any gcc2 internal prototype to avoid an error. */ -#ifdef __cplusplus -extern "C" -#endif -/* We use char because int might match the return type of a gcc2 - builtin and then its argument prototype would still apply. */ -char login_getcapbool (); -char (*f) (); - -int -main () -{ -/* The GNU C library defines this for functions which it implements - to always fail with ENOSYS. Some functions are actually named - something starting with __ and the normal name is an alias. */ -#if defined (__stub_login_getcapbool) || defined (__stub___login_getcapbool) -choke me -#else -f = login_getcapbool; -#endif - - ; - return 0; -} -configure:6613: result: no -configure:6557: checking for md5_crypt -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -/tmp/ccOgcSFe.o: In function `main': -/home/dtucker/openssh/portable/openssh-3.7.1p2/configure:6585: undefined reference to `md5_crypt' -collect2: ld returned 1 exit status -configure:6597: $? = 1 -configure: failed program was: -#line 6563 "configure" -#include "confdefs.h" -/* System header to define __stub macros and hopefully few prototypes, - which can conflict with char md5_crypt (); below. */ -#include -/* Override any gcc2 internal prototype to avoid an error. */ -#ifdef __cplusplus -extern "C" -#endif -/* We use char because int might match the return type of a gcc2 - builtin and then its argument prototype would still apply. */ -char md5_crypt (); -char (*f) (); - -int -main () -{ -/* The GNU C library defines this for functions which it implements - to always fail with ENOSYS. Some functions are actually named - something starting with __ and the normal name is an alias. */ -#if defined (__stub_md5_crypt) || defined (__stub___md5_crypt) -choke me -#else -f = md5_crypt; -#endif - - ; - return 0; -} -configure:6613: result: no -configure:6557: checking for memmove -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for mkdtemp -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for mmap -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for ngetaddrinfo -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -/tmp/cc60AS9x.o: In function `main': -/home/dtucker/openssh/portable/openssh-3.7.1p2/configure:6585: undefined reference to `ngetaddrinfo' -collect2: ld returned 1 exit status -configure:6597: $? = 1 -configure: failed program was: -#line 6563 "configure" -#include "confdefs.h" -/* System header to define __stub macros and hopefully few prototypes, - which can conflict with char ngetaddrinfo (); below. */ -#include -/* Override any gcc2 internal prototype to avoid an error. */ -#ifdef __cplusplus -extern "C" -#endif -/* We use char because int might match the return type of a gcc2 - builtin and then its argument prototype would still apply. */ -char ngetaddrinfo (); -char (*f) (); - -int -main () -{ -/* The GNU C library defines this for functions which it implements - to always fail with ENOSYS. Some functions are actually named - something starting with __ and the normal name is an alias. */ -#if defined (__stub_ngetaddrinfo) || defined (__stub___ngetaddrinfo) -choke me -#else -f = ngetaddrinfo; -#endif - - ; - return 0; -} -configure:6613: result: no -configure:6557: checking for nsleep -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -/tmp/cc0h8ns9.o: In function `main': -/home/dtucker/openssh/portable/openssh-3.7.1p2/configure:6585: undefined reference to `nsleep' -collect2: ld returned 1 exit status -configure:6597: $? = 1 -configure: failed program was: -#line 6563 "configure" -#include "confdefs.h" -/* System header to define __stub macros and hopefully few prototypes, - which can conflict with char nsleep (); below. */ -#include -/* Override any gcc2 internal prototype to avoid an error. */ -#ifdef __cplusplus -extern "C" -#endif -/* We use char because int might match the return type of a gcc2 - builtin and then its argument prototype would still apply. */ -char nsleep (); -char (*f) (); - -int -main () -{ -/* The GNU C library defines this for functions which it implements - to always fail with ENOSYS. Some functions are actually named - something starting with __ and the normal name is an alias. */ -#if defined (__stub_nsleep) || defined (__stub___nsleep) -choke me -#else -f = nsleep; -#endif - - ; - return 0; -} -configure:6613: result: no -configure:6557: checking for ogetaddrinfo -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -/tmp/ccKo3Qqr.o: In function `main': -/home/dtucker/openssh/portable/openssh-3.7.1p2/configure:6585: undefined reference to `ogetaddrinfo' -collect2: ld returned 1 exit status -configure:6597: $? = 1 -configure: failed program was: -#line 6563 "configure" -#include "confdefs.h" -/* System header to define __stub macros and hopefully few prototypes, - which can conflict with char ogetaddrinfo (); below. */ -#include -/* Override any gcc2 internal prototype to avoid an error. */ -#ifdef __cplusplus -extern "C" -#endif -/* We use char because int might match the return type of a gcc2 - builtin and then its argument prototype would still apply. */ -char ogetaddrinfo (); -char (*f) (); - -int -main () -{ -/* The GNU C library defines this for functions which it implements - to always fail with ENOSYS. Some functions are actually named - something starting with __ and the normal name is an alias. */ -#if defined (__stub_ogetaddrinfo) || defined (__stub___ogetaddrinfo) -choke me -#else -f = ogetaddrinfo; -#endif - - ; - return 0; -} -configure:6613: result: no -configure:6557: checking for openlog_r -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -/tmp/ccEj54Y4.o: In function `main': -/home/dtucker/openssh/portable/openssh-3.7.1p2/configure:6585: undefined reference to `openlog_r' -collect2: ld returned 1 exit status -configure:6597: $? = 1 -configure: failed program was: -#line 6563 "configure" -#include "confdefs.h" -/* System header to define __stub macros and hopefully few prototypes, - which can conflict with char openlog_r (); below. */ -#include -/* Override any gcc2 internal prototype to avoid an error. */ -#ifdef __cplusplus -extern "C" -#endif -/* We use char because int might match the return type of a gcc2 - builtin and then its argument prototype would still apply. */ -char openlog_r (); -char (*f) (); - -int -main () -{ -/* The GNU C library defines this for functions which it implements - to always fail with ENOSYS. Some functions are actually named - something starting with __ and the normal name is an alias. */ -#if defined (__stub_openlog_r) || defined (__stub___openlog_r) -choke me -#else -f = openlog_r; -#endif - - ; - return 0; -} -configure:6613: result: no -configure:6557: checking for openpty -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for pstat -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -/tmp/ccMf6dal.o: In function `main': -/home/dtucker/openssh/portable/openssh-3.7.1p2/configure:6585: undefined reference to `pstat' -collect2: ld returned 1 exit status -configure:6597: $? = 1 -configure: failed program was: -#line 6563 "configure" -#include "confdefs.h" -/* System header to define __stub macros and hopefully few prototypes, - which can conflict with char pstat (); below. */ -#include -/* Override any gcc2 internal prototype to avoid an error. */ -#ifdef __cplusplus -extern "C" -#endif -/* We use char because int might match the return type of a gcc2 - builtin and then its argument prototype would still apply. */ -char pstat (); -char (*f) (); - -int -main () -{ -/* The GNU C library defines this for functions which it implements - to always fail with ENOSYS. Some functions are actually named - something starting with __ and the normal name is an alias. */ -#if defined (__stub_pstat) || defined (__stub___pstat) -choke me -#else -f = pstat; -#endif - - ; - return 0; -} -configure:6613: result: no -configure:6557: checking for readpassphrase -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -/tmp/ccMaxPnD.o: In function `main': -/home/dtucker/openssh/portable/openssh-3.7.1p2/configure:6585: undefined reference to `readpassphrase' -collect2: ld returned 1 exit status -configure:6597: $? = 1 -configure: failed program was: -#line 6563 "configure" -#include "confdefs.h" -/* System header to define __stub macros and hopefully few prototypes, - which can conflict with char readpassphrase (); below. */ -#include -/* Override any gcc2 internal prototype to avoid an error. */ -#ifdef __cplusplus -extern "C" -#endif -/* We use char because int might match the return type of a gcc2 - builtin and then its argument prototype would still apply. */ -char readpassphrase (); -char (*f) (); - -int -main () -{ -/* The GNU C library defines this for functions which it implements - to always fail with ENOSYS. Some functions are actually named - something starting with __ and the normal name is an alias. */ -#if defined (__stub_readpassphrase) || defined (__stub___readpassphrase) -choke me -#else -f = readpassphrase; -#endif - - ; - return 0; -} -configure:6613: result: no -configure:6557: checking for realpath -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for recvmsg -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for rresvport_af -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for sendmsg -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for setdtablesize -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -/tmp/cc0C59kB.o: In function `main': -/home/dtucker/openssh/portable/openssh-3.7.1p2/configure:6585: undefined reference to `setdtablesize' -collect2: ld returned 1 exit status -configure:6597: $? = 1 -configure: failed program was: -#line 6563 "configure" -#include "confdefs.h" -/* System header to define __stub macros and hopefully few prototypes, - which can conflict with char setdtablesize (); below. */ -#include -/* Override any gcc2 internal prototype to avoid an error. */ -#ifdef __cplusplus -extern "C" -#endif -/* We use char because int might match the return type of a gcc2 - builtin and then its argument prototype would still apply. */ -char setdtablesize (); -char (*f) (); - -int -main () -{ -/* The GNU C library defines this for functions which it implements - to always fail with ENOSYS. Some functions are actually named - something starting with __ and the normal name is an alias. */ -#if defined (__stub_setdtablesize) || defined (__stub___setdtablesize) -choke me -#else -f = setdtablesize; -#endif - - ; - return 0; -} -configure:6613: result: no -configure:6557: checking for setegid -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for setenv -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for seteuid -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for setgroups -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for setlogin -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure: In function `main': -configure:6583: error: `choke' undeclared (first use in this function) -configure:6583: error: (Each undeclared identifier is reported only once -configure:6583: error: for each function it appears in.) -configure:6583: error: parse error before "me" -configure:6597: $? = 1 -configure: failed program was: -#line 6563 "configure" -#include "confdefs.h" -/* System header to define __stub macros and hopefully few prototypes, - which can conflict with char setlogin (); below. */ -#include -/* Override any gcc2 internal prototype to avoid an error. */ -#ifdef __cplusplus -extern "C" -#endif -/* We use char because int might match the return type of a gcc2 - builtin and then its argument prototype would still apply. */ -char setlogin (); -char (*f) (); - -int -main () -{ -/* The GNU C library defines this for functions which it implements - to always fail with ENOSYS. Some functions are actually named - something starting with __ and the normal name is an alias. */ -#if defined (__stub_setlogin) || defined (__stub___setlogin) -choke me -#else -f = setlogin; -#endif - - ; - return 0; -} -configure:6613: result: no -configure:6557: checking for setpcred -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -/tmp/ccijAGAw.o: In function `main': -/home/dtucker/openssh/portable/openssh-3.7.1p2/configure:6585: undefined reference to `setpcred' -collect2: ld returned 1 exit status -configure:6597: $? = 1 -configure: failed program was: -#line 6563 "configure" -#include "confdefs.h" -/* System header to define __stub macros and hopefully few prototypes, - which can conflict with char setpcred (); below. */ -#include -/* Override any gcc2 internal prototype to avoid an error. */ -#ifdef __cplusplus -extern "C" -#endif -/* We use char because int might match the return type of a gcc2 - builtin and then its argument prototype would still apply. */ -char setpcred (); -char (*f) (); - -int -main () -{ -/* The GNU C library defines this for functions which it implements - to always fail with ENOSYS. Some functions are actually named - something starting with __ and the normal name is an alias. */ -#if defined (__stub_setpcred) || defined (__stub___setpcred) -choke me -#else -f = setpcred; -#endif - - ; - return 0; -} -configure:6613: result: no -configure:6557: checking for setproctitle -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -/tmp/cce1uAY7.o: In function `main': -/home/dtucker/openssh/portable/openssh-3.7.1p2/configure:6585: undefined reference to `setproctitle' -collect2: ld returned 1 exit status -configure:6597: $? = 1 -configure: failed program was: -#line 6563 "configure" -#include "confdefs.h" -/* System header to define __stub macros and hopefully few prototypes, - which can conflict with char setproctitle (); below. */ -#include -/* Override any gcc2 internal prototype to avoid an error. */ -#ifdef __cplusplus -extern "C" -#endif -/* We use char because int might match the return type of a gcc2 - builtin and then its argument prototype would still apply. */ -char setproctitle (); -char (*f) (); - -int -main () -{ -/* The GNU C library defines this for functions which it implements - to always fail with ENOSYS. Some functions are actually named - something starting with __ and the normal name is an alias. */ -#if defined (__stub_setproctitle) || defined (__stub___setproctitle) -choke me -#else -f = setproctitle; -#endif - - ; - return 0; -} -configure:6613: result: no -configure:6557: checking for setregid -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for setresgid -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for setresuid -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for setreuid -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for setrlimit -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for setsid -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for setvbuf -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for sigaction -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for sigvec -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for snprintf -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6573: warning: conflicting types for built-in function `snprintf' -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for socketpair -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for strerror -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for strlcat -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -/tmp/ccC7ijTs.o: In function `main': -/home/dtucker/openssh/portable/openssh-3.7.1p2/configure:6585: undefined reference to `strlcat' -collect2: ld returned 1 exit status -configure:6597: $? = 1 -configure: failed program was: -#line 6563 "configure" -#include "confdefs.h" -/* System header to define __stub macros and hopefully few prototypes, - which can conflict with char strlcat (); below. */ -#include -/* Override any gcc2 internal prototype to avoid an error. */ -#ifdef __cplusplus -extern "C" -#endif -/* We use char because int might match the return type of a gcc2 - builtin and then its argument prototype would still apply. */ -char strlcat (); -char (*f) (); - -int -main () -{ -/* The GNU C library defines this for functions which it implements - to always fail with ENOSYS. Some functions are actually named - something starting with __ and the normal name is an alias. */ -#if defined (__stub_strlcat) || defined (__stub___strlcat) -choke me -#else -f = strlcat; -#endif - - ; - return 0; -} -configure:6613: result: no -configure:6557: checking for strlcpy -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -/tmp/cc4ZYQk4.o: In function `main': -/home/dtucker/openssh/portable/openssh-3.7.1p2/configure:6585: undefined reference to `strlcpy' -collect2: ld returned 1 exit status -configure:6597: $? = 1 -configure: failed program was: -#line 6563 "configure" -#include "confdefs.h" -/* System header to define __stub macros and hopefully few prototypes, - which can conflict with char strlcpy (); below. */ -#include -/* Override any gcc2 internal prototype to avoid an error. */ -#ifdef __cplusplus -extern "C" -#endif -/* We use char because int might match the return type of a gcc2 - builtin and then its argument prototype would still apply. */ -char strlcpy (); -char (*f) (); - -int -main () -{ -/* The GNU C library defines this for functions which it implements - to always fail with ENOSYS. Some functions are actually named - something starting with __ and the normal name is an alias. */ -#if defined (__stub_strlcpy) || defined (__stub___strlcpy) -choke me -#else -f = strlcpy; -#endif - - ; - return 0; -} -configure:6613: result: no -configure:6557: checking for strmode -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -/tmp/ccebbqNF.o: In function `main': -/home/dtucker/openssh/portable/openssh-3.7.1p2/configure:6585: undefined reference to `strmode' -collect2: ld returned 1 exit status -configure:6597: $? = 1 -configure: failed program was: -#line 6563 "configure" -#include "confdefs.h" -/* System header to define __stub macros and hopefully few prototypes, - which can conflict with char strmode (); below. */ -#include -/* Override any gcc2 internal prototype to avoid an error. */ -#ifdef __cplusplus -extern "C" -#endif -/* We use char because int might match the return type of a gcc2 - builtin and then its argument prototype would still apply. */ -char strmode (); -char (*f) (); - -int -main () -{ -/* The GNU C library defines this for functions which it implements - to always fail with ENOSYS. Some functions are actually named - something starting with __ and the normal name is an alias. */ -#if defined (__stub_strmode) || defined (__stub___strmode) -choke me -#else -f = strmode; -#endif - - ; - return 0; -} -configure:6613: result: no -configure:6557: checking for strnvis -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -/tmp/cccA75gh.o: In function `main': -/home/dtucker/openssh/portable/openssh-3.7.1p2/configure:6585: undefined reference to `strnvis' -collect2: ld returned 1 exit status -configure:6597: $? = 1 -configure: failed program was: -#line 6563 "configure" -#include "confdefs.h" -/* System header to define __stub macros and hopefully few prototypes, - which can conflict with char strnvis (); below. */ -#include -/* Override any gcc2 internal prototype to avoid an error. */ -#ifdef __cplusplus -extern "C" -#endif -/* We use char because int might match the return type of a gcc2 - builtin and then its argument prototype would still apply. */ -char strnvis (); -char (*f) (); - -int -main () -{ -/* The GNU C library defines this for functions which it implements - to always fail with ENOSYS. Some functions are actually named - something starting with __ and the normal name is an alias. */ -#if defined (__stub_strnvis) || defined (__stub___strnvis) -choke me -#else -f = strnvis; -#endif - - ; - return 0; -} -configure:6613: result: no -configure:6557: checking for sysconf -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for tcgetpgrp -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for truncate -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for utimes -configure:6613: result: yes -configure:6557: checking for vhangup -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for vsnprintf -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6573: warning: conflicting types for built-in function `vsnprintf' -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6557: checking for waitpid -configure:6594: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6597: $? = 0 -configure:6600: test -s conftest -configure:6603: $? = 0 -configure:6613: result: yes -configure:6628: checking for gai_strerror -configure:6665: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6668: $? = 0 -configure:6671: test -s conftest -configure:6674: $? = 0 -configure:6684: result: yes -configure:6716: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized conftest.c >&5 -configure: In function `main': -configure:6709: warning: assignment discards qualifiers from pointer target type -configure:6719: $? = 0 -configure:6722: test -s conftest.o -configure:6725: $? = 0 -configure:6740: checking for library containing nanosleep -configure:6767: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:6770: $? = 0 -configure:6773: test -s conftest -configure:6776: $? = 0 -configure:6829: result: none required -configure:6839: checking for ANSI C header files -configure:6853: gcc -E conftest.c -configure:6859: $? = 0 -configure:6946: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure: In function `main': -configure:6938: warning: implicit declaration of function `exit' -configure:6949: $? = 0 -configure:6951: ./conftest -configure:6954: $? = 0 -configure:6967: result: yes -configure:6983: checking for sys/types.h -configure:6995: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized conftest.c >&5 -configure:6998: $? = 0 -configure:7001: test -s conftest.o -configure:7004: $? = 0 -configure:7014: result: yes -configure:6983: checking for sys/stat.h -configure:7014: result: yes -configure:6983: checking for stdlib.h -configure:6995: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized conftest.c >&5 -configure:6998: $? = 0 -configure:7001: test -s conftest.o -configure:7004: $? = 0 -configure:7014: result: yes -configure:6983: checking for string.h -configure:6995: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized conftest.c >&5 -configure:6998: $? = 0 -configure:7001: test -s conftest.o -configure:7004: $? = 0 -configure:7014: result: yes -configure:6983: checking for memory.h -configure:6995: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized conftest.c >&5 -configure:6998: $? = 0 -configure:7001: test -s conftest.o -configure:7004: $? = 0 -configure:7014: result: yes -configure:6983: checking for strings.h -configure:7014: result: yes -configure:6983: checking for inttypes.h -configure:6995: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized conftest.c >&5 -configure:6998: $? = 0 -configure:7001: test -s conftest.o -configure:7004: $? = 0 -configure:7014: result: yes -configure:6983: checking for stdint.h -configure:7014: result: yes -configure:6983: checking for unistd.h -configure:6995: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized conftest.c >&5 -configure:6998: $? = 0 -configure:7001: test -s conftest.o -configure:7004: $? = 0 -configure:7014: result: yes -configure:7024: checking whether strsep is declared -configure:7045: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized conftest.c >&5 -configure:7048: $? = 0 -configure:7051: test -s conftest.o -configure:7054: $? = 0 -configure:7064: result: yes -configure:7071: checking for strsep -configure:7108: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:7111: $? = 0 -configure:7114: test -s conftest -configure:7117: $? = 0 -configure:7127: result: yes -configure:7139: checking whether getrusage is declared -configure:7160: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized conftest.c >&5 -configure: In function `main': -configure:7184: error: `getrusage' undeclared (first use in this function) -configure:7184: error: (Each undeclared identifier is reported only once -configure:7184: error: for each function it appears in.) -configure:7184: warning: unused variable `p' -configure:7163: $? = 1 -configure: failed program was: -#line 7145 "configure" -#include "confdefs.h" -#include -#if HAVE_SYS_TYPES_H -# include -#endif -#if HAVE_SYS_STAT_H -# include -#endif -#if STDC_HEADERS -# include -# include -#else -# if HAVE_STDLIB_H -# include -# endif -#endif -#if HAVE_STRING_H -# if !STDC_HEADERS && HAVE_MEMORY_H -# include -# endif -# include -#endif -#if HAVE_STRINGS_H -# include -#endif -#if HAVE_INTTYPES_H -# include -#else -# if HAVE_STDINT_H -# include -# endif -#endif -#if HAVE_UNISTD_H -# include -#endif -int -main () -{ -#ifndef getrusage - char *p = (char *) getrusage; -#endif - - ; - return 0; -} -configure:7179: result: no -configure:7254: checking whether tcsendbreak is declared -configure:7276: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized conftest.c >&5 -configure: In function `main': -configure:7267: warning: unused variable `p' -configure:7279: $? = 0 -configure:7282: test -s conftest.o -configure:7285: $? = 0 -configure:7295: result: yes -configure:7378: checking for gettimeofday -configure:7415: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:7418: $? = 0 -configure:7421: test -s conftest -configure:7424: $? = 0 -configure:7434: result: yes -configure:7378: checking for time -configure:7415: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:7418: $? = 0 -configure:7421: test -s conftest -configure:7424: $? = 0 -configure:7434: result: yes -configure:7447: checking for endutent -configure:7484: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:7487: $? = 0 -configure:7490: test -s conftest -configure:7493: $? = 0 -configure:7503: result: yes -configure:7447: checking for getutent -configure:7484: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:7487: $? = 0 -configure:7490: test -s conftest -configure:7493: $? = 0 -configure:7503: result: yes -configure:7447: checking for getutid -configure:7484: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:7487: $? = 0 -configure:7490: test -s conftest -configure:7493: $? = 0 -configure:7503: result: yes -configure:7447: checking for getutline -configure:7484: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:7487: $? = 0 -configure:7490: test -s conftest -configure:7493: $? = 0 -configure:7503: result: yes -configure:7447: checking for pututline -configure:7484: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:7487: $? = 0 -configure:7490: test -s conftest -configure:7493: $? = 0 -configure:7503: result: yes -configure:7447: checking for setutent -configure:7484: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:7487: $? = 0 -configure:7490: test -s conftest -configure:7493: $? = 0 -configure:7503: result: yes -configure:7516: checking for utmpname -configure:7553: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:7556: $? = 0 -configure:7559: test -s conftest -configure:7562: $? = 0 -configure:7572: result: yes -configure:7585: checking for endutxent -configure:7622: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:7625: $? = 0 -configure:7628: test -s conftest -configure:7631: $? = 0 -configure:7641: result: yes -configure:7585: checking for getutxent -configure:7622: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:7625: $? = 0 -configure:7628: test -s conftest -configure:7631: $? = 0 -configure:7641: result: yes -configure:7585: checking for getutxid -configure:7622: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:7625: $? = 0 -configure:7628: test -s conftest -configure:7631: $? = 0 -configure:7641: result: yes -configure:7585: checking for getutxline -configure:7622: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:7625: $? = 0 -configure:7628: test -s conftest -configure:7631: $? = 0 -configure:7641: result: yes -configure:7585: checking for pututxline -configure:7622: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:7625: $? = 0 -configure:7628: test -s conftest -configure:7631: $? = 0 -configure:7641: result: yes -configure:7654: checking for setutxent -configure:7691: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:7694: $? = 0 -configure:7697: test -s conftest -configure:7700: $? = 0 -configure:7710: result: yes -configure:7654: checking for utmpxname -configure:7691: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:7694: $? = 0 -configure:7697: test -s conftest -configure:7700: $? = 0 -configure:7710: result: yes -configure:7720: checking for daemon -configure:7757: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:7760: $? = 0 -configure:7763: test -s conftest -configure:7766: $? = 0 -configure:7776: result: yes -configure:7842: checking for getpagesize -configure:7879: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:7882: $? = 0 -configure:7885: test -s conftest -configure:7888: $? = 0 -configure:7898: result: yes -configure:7966: checking whether snprintf correctly terminates long strings -configure:7982: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure: In function `main': -configure:7977: warning: implicit declaration of function `exit' -configure:7985: $? = 0 -configure:7987: ./conftest -configure:7990: $? = 0 -configure:7992: result: yes -configure:8014: checking for (overly) strict mkstemp -configure:8038: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure:8029: warning: return type defaults to `int' -configure: In function `main': -configure:8032: warning: implicit declaration of function `unlink' -configure:8041: $? = 0 -configure:8043: ./conftest -configure:8046: $? = 1 -configure: program exited with status 1 -configure: failed program was: -#line 8026 "configure" -#include "confdefs.h" - -#include -main() { char template[]="conftest.mkstemp-test"; -if (mkstemp(template) == -1) - exit(1); -unlink(template); exit(0); -} - -configure:8057: result: yes -configure:8069: checking if openpty correctly handles controlling tty -configure:8114: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -L/usr/local/lib conftest.c -lutil -lz -lnsl >&5 -configure: In function `main': -configure:8090: warning: implicit declaration of function `fork' -configure:8092: warning: implicit declaration of function `exit' -configure:8100: warning: implicit declaration of function `close' -configure:8101: warning: implicit declaration of function `setsid' -configure:8102: warning: implicit declaration of function `openpty' -configure:8117: $? = 0 -configure:8119: ./conftest -configure:8122: $? = 0 -configure:8125: result: yes -configure:8144: checking whether getpgrp takes no argument -configure:8163: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized conftest.c >&5 -configure: In function `main': -configure:8189: error: too many arguments to function `getpgrp' -configure:8166: $? = 1 -configure: failed program was: -#line 8151 "configure" -#include "confdefs.h" -#include -#if HAVE_SYS_TYPES_H -# include -#endif -#if HAVE_SYS_STAT_H -# include -#endif -#if STDC_HEADERS -# include -# include -#else -# if HAVE_STDLIB_H -# include -# endif -#endif -#if HAVE_STRING_H -# if !STDC_HEADERS && HAVE_MEMORY_H -# include -# endif -# include -#endif -#if HAVE_STRINGS_H -# include -#endif -#if HAVE_INTTYPES_H -# include -#else -# if HAVE_STDINT_H -# include -# endif -#endif -#if HAVE_UNISTD_H -# include -#endif -int -main () -{ -getpgrp (0); - ; - return 0; -} -configure:8195: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized conftest.c >&5 -configure:8198: $? = 0 -configure:8201: test -s conftest.o -configure:8204: $? = 0 -configure:8299: result: yes -configure:8763: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include -L/usr/local/ssl/lib -L/usr/local/lib conftest.c -lutil -lz -lnsl -lcrypto >&5 -configure:8766: $? = 0 -configure:8769: test -s conftest -configure:8772: $? = 0 -configure:8838: checking OpenSSL header version -configure:8869: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include -L/usr/local/ssl/lib -L/usr/local/lib conftest.c -lutil -lz -lnsl -lcrypto >&5 -configure: In function `main': -configure:8858: warning: implicit declaration of function `exit' -configure:8860: warning: unsigned int format, long int arg (arg 3) -configure:8872: $? = 0 -configure:8874: ./conftest -configure:8877: $? = 0 -configure:8881: result: 90703f (OpenSSL 0.9.7c 30 Sep 2003) -configure:8900: checking OpenSSL library version -configure:8932: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include -L/usr/local/ssl/lib -L/usr/local/lib conftest.c -lutil -lz -lnsl -lcrypto >&5 -configure: In function `main': -configure:8923: warning: unsigned int format, long unsigned int arg (arg 3) -configure:8935: $? = 0 -configure:8937: ./conftest -configure:8940: $? = 0 -configure:8944: result: 90703f (OpenSSL 0.9.7c 30 Sep 2003) -configure:8963: checking whether OpenSSL's headers match the library -configure:8980: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include -L/usr/local/ssl/lib -L/usr/local/lib conftest.c -lutil -lz -lnsl -lcrypto >&5 -configure: In function `main': -configure:8975: warning: implicit declaration of function `exit' -configure:8975: warning: implicit declaration of function `SSLeay' -configure:8983: $? = 0 -configure:8985: ./conftest -configure:8988: $? = 0 -configure:8991: result: yes -configure:9016: checking for crypt in -lcrypt -configure:9043: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include -L/usr/local/ssl/lib -L/usr/local/lib conftest.c -lcrypt -lutil -lz -lnsl -lcrypto >&5 -configure:9046: $? = 0 -configure:9049: test -s conftest -configure:9052: $? = 0 -configure:9063: result: yes -configure:9074: checking whether OpenSSL's PRNG is internally seeded -configure:9091: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include -L/usr/local/ssl/lib -L/usr/local/lib conftest.c -lutil -lz -lnsl -lcrypto -lcrypt >&5 -configure:9094: $? = 0 -configure:9096: ./conftest -configure:9099: $? = 0 -configure:9103: result: yes -configure:9303: checking for ls -configure:9320: found /bin/ls -configure:9331: result: /bin/ls -configure:9344: checking for netstat -configure:9361: found /bin/netstat -configure:9372: result: /bin/netstat -configure:9385: checking for arp -configure:9402: found /sbin/arp -configure:9413: result: /sbin/arp -configure:9426: checking for ifconfig -configure:9443: found /sbin/ifconfig -configure:9454: result: /sbin/ifconfig -configure:9467: checking for jstat -configure:9498: result: no -configure:9508: checking for ps -configure:9525: found /bin/ps -configure:9536: result: /bin/ps -configure:9549: checking for sar -configure:9566: found /usr/bin/sar -configure:9577: result: /usr/bin/sar -configure:9590: checking for w -configure:9607: found /usr/bin/w -configure:9618: result: /usr/bin/w -configure:9631: checking for who -configure:9648: found /usr/bin/who -configure:9659: result: /usr/bin/who -configure:9672: checking for last -configure:9689: found /usr/bin/last -configure:9700: result: /usr/bin/last -configure:9713: checking for lastlog -configure:9730: found /usr/bin/lastlog -configure:9741: result: /usr/bin/lastlog -configure:9754: checking for df -configure:9771: found /bin/df -configure:9782: result: /bin/df -configure:9795: checking for vmstat -configure:9812: found /usr/bin/vmstat -configure:9823: result: /usr/bin/vmstat -configure:9836: checking for uptime -configure:9853: found /usr/bin/uptime -configure:9864: result: /usr/bin/uptime -configure:9877: checking for ipcs -configure:9894: found /usr/bin/ipcs -configure:9905: result: /usr/bin/ipcs -configure:9918: checking for tail -configure:9935: found /usr/bin/tail -configure:9946: result: /usr/bin/tail -configure:9980: checking for char -configure:10001: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure:10004: $? = 0 -configure:10007: test -s conftest.o -configure:10010: $? = 0 -configure:10020: result: yes -configure:10023: checking size of char -configure:10187: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include -L/usr/local/ssl/lib -L/usr/local/lib conftest.c -lutil -lz -lnsl -lcrypto -lcrypt >&5 -configure:10190: $? = 0 -configure:10192: ./conftest -configure:10195: $? = 0 -configure:10211: result: 1 -configure:10217: checking for short int -configure:10238: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure:10241: $? = 0 -configure:10244: test -s conftest.o -configure:10247: $? = 0 -configure:10257: result: yes -configure:10260: checking size of short int -configure:10424: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include -L/usr/local/ssl/lib -L/usr/local/lib conftest.c -lutil -lz -lnsl -lcrypto -lcrypt >&5 -configure:10427: $? = 0 -configure:10429: ./conftest -configure:10432: $? = 0 -configure:10448: result: 2 -configure:10454: checking for int -configure:10475: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure:10478: $? = 0 -configure:10481: test -s conftest.o -configure:10484: $? = 0 -configure:10494: result: yes -configure:10497: checking size of int -configure:10661: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include -L/usr/local/ssl/lib -L/usr/local/lib conftest.c -lutil -lz -lnsl -lcrypto -lcrypt >&5 -configure:10664: $? = 0 -configure:10666: ./conftest -configure:10669: $? = 0 -configure:10685: result: 4 -configure:10691: checking for long int -configure:10712: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure:10715: $? = 0 -configure:10718: test -s conftest.o -configure:10721: $? = 0 -configure:10731: result: yes -configure:10734: checking size of long int -configure:10898: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include -L/usr/local/ssl/lib -L/usr/local/lib conftest.c -lutil -lz -lnsl -lcrypto -lcrypt >&5 -configure:10901: $? = 0 -configure:10903: ./conftest -configure:10906: $? = 0 -configure:10922: result: 4 -configure:10928: checking for long long int -configure:10949: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure:10952: $? = 0 -configure:10955: test -s conftest.o -configure:10958: $? = 0 -configure:10968: result: yes -configure:10971: checking size of long long int -configure:11135: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include -L/usr/local/ssl/lib -L/usr/local/lib conftest.c -lutil -lz -lnsl -lcrypto -lcrypt >&5 -configure:11138: $? = 0 -configure:11140: ./conftest -configure:11143: $? = 0 -configure:11159: result: 8 -configure:11171: checking for u_int type -configure:11190: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure:11193: $? = 0 -configure:11196: test -s conftest.o -configure:11199: $? = 0 -configure:11211: result: yes -configure:11221: checking for intXX_t types -configure:11240: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure:11243: $? = 0 -configure:11246: test -s conftest.o -configure:11249: $? = 0 -configure:11261: result: yes -configure:11318: checking for int64_t type -configure:11346: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure:11349: $? = 0 -configure:11352: test -s conftest.o -configure:11355: $? = 0 -configure:11367: result: yes -configure:11376: checking for u_intXX_t types -configure:11395: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure:11398: $? = 0 -configure:11401: test -s conftest.o -configure:11404: $? = 0 -configure:11416: result: yes -configure:11471: checking for u_int64_t types -configure:11490: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure:11493: $? = 0 -configure:11496: test -s conftest.o -configure:11499: $? = 0 -configure:11511: result: yes -configure:11620: checking for uintXX_t types in stdint.h -configure:11635: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure:11638: $? = 0 -configure:11641: test -s conftest.o -configure:11644: $? = 0 -configure:11651: result: yes -configure:11721: checking for u_char -configure:11742: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure:11745: $? = 0 -configure:11748: test -s conftest.o -configure:11751: $? = 0 -configure:11763: result: yes -configure:11772: checking for socklen_t -configure:11795: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure:11798: $? = 0 -configure:11801: test -s conftest.o -configure:11804: $? = 0 -configure:11814: result: yes -configure:11892: checking for sig_atomic_t -configure:11914: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure:11917: $? = 0 -configure:11920: test -s conftest.o -configure:11923: $? = 0 -configure:11933: result: yes -configure:11943: checking for size_t -configure:11964: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure:11967: $? = 0 -configure:11970: test -s conftest.o -configure:11973: $? = 0 -configure:11985: result: yes -configure:11994: checking for ssize_t -configure:12015: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure:12018: $? = 0 -configure:12021: test -s conftest.o -configure:12024: $? = 0 -configure:12036: result: yes -configure:12045: checking for clock_t -configure:12066: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure:12069: $? = 0 -configure:12072: test -s conftest.o -configure:12075: $? = 0 -configure:12087: result: yes -configure:12096: checking for sa_family_t -configure:12118: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure:12121: $? = 0 -configure:12124: test -s conftest.o -configure:12127: $? = 0 -configure:12174: result: yes -configure:12183: checking for pid_t -configure:12204: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure:12207: $? = 0 -configure:12210: test -s conftest.o -configure:12213: $? = 0 -configure:12225: result: yes -configure:12234: checking for mode_t -configure:12255: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure:12258: $? = 0 -configure:12261: test -s conftest.o -configure:12264: $? = 0 -configure:12276: result: yes -configure:12285: checking for struct sockaddr_storage -configure:12307: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure: In function `main': -configure:12300: warning: unused variable `s' -configure:12310: $? = 0 -configure:12313: test -s conftest.o -configure:12316: $? = 0 -configure:12328: result: yes -configure:12337: checking for struct sockaddr_in6 -configure:12359: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure:12362: $? = 0 -configure:12365: test -s conftest.o -configure:12368: $? = 0 -configure:12380: result: yes -configure:12389: checking for struct in6_addr -configure:12411: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure:12414: $? = 0 -configure:12417: test -s conftest.o -configure:12420: $? = 0 -configure:12432: result: yes -configure:12441: checking for struct addrinfo -configure:12464: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure:12467: $? = 0 -configure:12470: test -s conftest.o -configure:12473: $? = 0 -configure:12485: result: yes -configure:12494: checking for struct timeval -configure:12513: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure:12516: $? = 0 -configure:12519: test -s conftest.o -configure:12522: $? = 0 -configure:12534: result: yes -configure:12544: checking for struct timespec -configure:12565: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure:12568: $? = 0 -configure:12571: test -s conftest.o -configure:12574: $? = 0 -configure:12584: result: yes -configure:12637: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include -L/usr/local/ssl/lib -L/usr/local/lib conftest.c -lutil -lz -lnsl -lcrypto -lcrypt >&5 -configure:12615: warning: return type defaults to `int' -configure: In function `main': -configure:12627: warning: implicit declaration of function `exit' -configure:12640: $? = 0 -configure:12642: ./conftest -configure:12645: $? = 0 -configure:12664: checking for ut_host field in utmp.h -configure:12688: result: yes -configure:12704: checking for ut_host field in utmpx.h -configure:12728: result: yes -configure:12744: checking for syslen field in utmpx.h -configure:12768: result: no -configure:12784: checking for ut_pid field in utmp.h -configure:12808: result: yes -configure:12824: checking for ut_type field in utmp.h -configure:12848: result: yes -configure:12864: checking for ut_type field in utmpx.h -configure:12888: result: yes -configure:12904: checking for ut_tv field in utmp.h -configure:12928: result: yes -configure:12944: checking for ut_id field in utmp.h -configure:12968: result: yes -configure:12984: checking for ut_id field in utmpx.h -configure:13008: result: yes -configure:13024: checking for ut_addr field in utmp.h -configure:13048: result: yes -configure:13064: checking for ut_addr field in utmpx.h -configure:13088: result: yes -configure:13104: checking for ut_addr_v6 field in utmp.h -configure:13128: result: yes -configure:13144: checking for ut_addr_v6 field in utmpx.h -configure:13168: result: yes -configure:13184: checking for ut_exit field in utmp.h -configure:13208: result: yes -configure:13224: checking for ut_time field in utmp.h -configure:13248: result: no -configure:13264: checking for ut_time field in utmpx.h -configure:13288: result: no -configure:13304: checking for ut_tv field in utmpx.h -configure:13328: result: yes -configure:13341: checking for struct stat.st_blksize -configure:13361: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure:13364: $? = 0 -configure:13367: test -s conftest.o -configure:13370: $? = 0 -configure:13380: result: yes -configure:13390: checking for ss_family field in struct sockaddr_storage -configure:13412: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure:13415: $? = 0 -configure:13418: test -s conftest.o -configure:13421: $? = 0 -configure:13432: result: yes -configure:13441: checking for __ss_family field in struct sockaddr_storage -configure:13463: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure: In function `main': -configure:13456: error: structure has no member named `__ss_family' -configure:13466: $? = 1 -configure: failed program was: -#line 13448 "configure" -#include "confdefs.h" - -#include -#include - -int -main () -{ - struct sockaddr_storage s; s.__ss_family = 1; - ; - return 0; -} -configure:13484: result: no -configure:13493: checking for pw_class field in struct passwd -configure:13514: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure: In function `main': -configure:13507: error: structure has no member named `pw_class' -configure:13517: $? = 1 -configure: failed program was: -#line 13500 "configure" -#include "confdefs.h" - -#include - -int -main () -{ - struct passwd p; p.pw_class = 0; - ; - return 0; -} -configure:13535: result: no -configure:13544: checking for pw_expire field in struct passwd -configure:13565: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure: In function `main': -configure:13558: error: structure has no member named `pw_expire' -configure:13568: $? = 1 -configure: failed program was: -#line 13551 "configure" -#include "confdefs.h" - -#include - -int -main () -{ - struct passwd p; p.pw_expire = 0; - ; - return 0; -} -configure:13586: result: no -configure:13595: checking for pw_change field in struct passwd -configure:13616: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure: In function `main': -configure:13609: error: structure has no member named `pw_change' -configure:13619: $? = 1 -configure: failed program was: -#line 13602 "configure" -#include "confdefs.h" - -#include - -int -main () -{ - struct passwd p; p.pw_change = 0; - ; - return 0; -} -configure:13637: result: no -configure:13646: checking for msg_accrights field in struct msghdr -configure:13675: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include -L/usr/local/ssl/lib -L/usr/local/lib conftest.c -lutil -lz -lnsl -lcrypto -lcrypt >&5 -configure: In function `main': -configure:13668: error: structure has no member named `msg_accrights' -configure:13669: warning: implicit declaration of function `exit' -configure:13678: $? = 1 -configure: program exited with status 1 -configure: failed program was: -#line 13658 "configure" -#include "confdefs.h" - -#include -#include -#include -int main() { -#ifdef msg_accrights -exit(1); -#endif -struct msghdr m; -m.msg_accrights = 0; -exit(0); -} - -configure:13697: result: no -configure:13706: checking for msg_control field in struct msghdr -configure:13735: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include -L/usr/local/ssl/lib -L/usr/local/lib conftest.c -lutil -lz -lnsl -lcrypto -lcrypt >&5 -configure: In function `main': -configure:13729: warning: implicit declaration of function `exit' -configure:13738: $? = 0 -configure:13740: ./conftest -configure:13743: $? = 0 -configure:13757: result: yes -configure:13766: checking if libc defines __progname -configure:13785: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include -L/usr/local/ssl/lib -L/usr/local/lib conftest.c -lutil -lz -lnsl -lcrypto -lcrypt >&5 -configure: In function `main': -configure:13778: warning: implicit declaration of function `printf' -configure:13788: $? = 0 -configure:13791: test -s conftest -configure:13794: $? = 0 -configure:13806: result: yes -configure:13815: checking whether gcc implements __FUNCTION__ -configure:13836: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include -L/usr/local/ssl/lib -L/usr/local/lib conftest.c -lutil -lz -lnsl -lcrypto -lcrypt >&5 -configure:13839: $? = 0 -configure:13842: test -s conftest -configure:13845: $? = 0 -configure:13857: result: yes -configure:13866: checking whether gcc implements __func__ -configure:13887: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include -L/usr/local/ssl/lib -L/usr/local/lib conftest.c -lutil -lz -lnsl -lcrypto -lcrypt >&5 -configure:13890: $? = 0 -configure:13893: test -s conftest -configure:13896: $? = 0 -configure:13908: result: yes -configure:13917: checking whether getopt has optreset support -configure:13938: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include -L/usr/local/ssl/lib -L/usr/local/lib conftest.c -lutil -lz -lnsl -lcrypto -lcrypt >&5 -/tmp/cc0CbXxX.o: In function `main': -/home/dtucker/openssh/portable/openssh-3.7.1p2/configure:13931: undefined reference to `optreset' -collect2: ld returned 1 exit status -configure:13941: $? = 1 -configure: failed program was: -#line 13924 "configure" -#include "confdefs.h" - -#include - -int -main () -{ - extern int optreset; optreset = 0; - ; - return 0; -} -configure:13959: result: no -configure:13968: checking if libc defines sys_errlist -configure:13987: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include -L/usr/local/ssl/lib -L/usr/local/lib conftest.c -lutil -lz -lnsl -lcrypto -lcrypt >&5 -configure: In function `main': -configure:13980: warning: implicit declaration of function `printf' -/tmp/ccGgBamx.o: In function `main': -/home/dtucker/openssh/portable/openssh-3.7.1p2/configure:13980: `sys_errlist' is deprecated; use `strerror' or `strerror_r' instead -configure:13990: $? = 0 -configure:13993: test -s conftest -configure:13996: $? = 0 -configure:14008: result: yes -configure:14017: checking if libc defines sys_nerr -configure:14036: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include -L/usr/local/ssl/lib -L/usr/local/lib conftest.c -lutil -lz -lnsl -lcrypto -lcrypt >&5 -configure: In function `main': -configure:14029: warning: implicit declaration of function `printf' -/tmp/ccQypnR8.o: In function `main': -/home/dtucker/openssh/portable/openssh-3.7.1p2/configure:14029: `sys_nerr' is deprecated; use `strerror' or `strerror_r' instead -configure:14039: $? = 0 -configure:14042: test -s conftest -configure:14045: $? = 0 -configure:14057: result: yes -configure:15172: checking for xauth -configure:15189: found /usr/X11R6/bin/xauth -configure:15200: result: /usr/X11R6/bin/xauth -configure:15276: checking for "/dev/ptc" -configure:15291: result: no -configure:15327: checking for nroff -configure:15344: found /usr/bin/nroff -configure:15355: result: /usr/bin/nroff -configure:15415: checking if the systems has expire shadow information -configure:15434: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure:15437: $? = 0 -configure:15440: test -s conftest.o -configure:15443: $? = 0 -configure:15454: result: yes -configure:15498: checking for "/etc/default/login" -configure:15513: result: no -configure:15615: gcc -o conftest -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include -L/usr/local/ssl/lib -L/usr/local/lib conftest.c -lutil -lz -lnsl -lcrypto -lcrypt >&5 -configure:15598: warning: return type defaults to `int' -configure: In function `main': -configure:15604: warning: implicit declaration of function `exit' -configure:15618: $? = 0 -configure:15620: ./conftest -configure:15623: $? = 0 -configure:15647: result: Adding /opt/openssh/bin to USER_PATH so scp will work -configure:15677: checking if we need to convert IPv4 in IPv6-mapped addresses -configure:15701: result: yes (default) -configure:15872: checking if your system defines LASTLOG_FILE -configure:15899: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure: In function `main': -configure:15892: error: `LASTLOG_FILE' undeclared (first use in this function) -configure:15892: error: (Each undeclared identifier is reported only once -configure:15892: error: for each function it appears in.) -configure:15892: warning: unused variable `lastlog' -configure:15902: $? = 1 -configure: failed program was: -#line 15875 "configure" -#include "confdefs.h" - -#include -#include -#ifdef HAVE_LASTLOG_H -# include -#endif -#ifdef HAVE_PATHS_H -# include -#endif -#ifdef HAVE_LOGIN_H -# include -#endif - -int -main () -{ - char *lastlog = LASTLOG_FILE; - ; - return 0; -} -configure:15916: result: no -configure:15918: checking if your system defines _PATH_LASTLOG -configure:15942: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure: In function `main': -configure:15935: warning: unused variable `lastlog' -configure:15945: $? = 0 -configure:15948: test -s conftest.o -configure:15951: $? = 0 -configure:15953: result: yes -configure:15990: checking if your system defines UTMP_FILE -configure:16011: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure: In function `main': -configure:16004: warning: unused variable `utmp' -configure:16014: $? = 0 -configure:16017: test -s conftest.o -configure:16020: $? = 0 -configure:16022: result: yes -configure:16055: checking if your system defines WTMP_FILE -configure:16076: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure: In function `main': -configure:16069: warning: unused variable `wtmp' -configure:16079: $? = 0 -configure:16082: test -s conftest.o -configure:16085: $? = 0 -configure:16087: result: yes -configure:16120: checking if your system defines UTMPX_FILE -configure:16144: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure: In function `main': -configure:16137: error: `UTMPX_FILE' undeclared (first use in this function) -configure:16137: error: (Each undeclared identifier is reported only once -configure:16137: error: for each function it appears in.) -configure:16137: warning: unused variable `utmpx' -configure:16147: $? = 1 -configure: failed program was: -#line 16123 "configure" -#include "confdefs.h" - -#include -#include -#ifdef HAVE_UTMPX_H -#include -#endif -#ifdef HAVE_PATHS_H -# include -#endif - -int -main () -{ - char *utmpx = UTMPX_FILE; - ; - return 0; -} -configure:16160: result: no -configure:16180: checking if your system defines WTMPX_FILE -configure:16204: gcc -c -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I/usr/local/ssl/include conftest.c >&5 -configure: In function `main': -configure:16197: error: `WTMPX_FILE' undeclared (first use in this function) -configure:16197: error: (Each undeclared identifier is reported only once -configure:16197: error: for each function it appears in.) -configure:16197: warning: unused variable `wtmpx' -configure:16207: $? = 1 -configure: failed program was: -#line 16183 "configure" -#include "confdefs.h" - -#include -#include -#ifdef HAVE_UTMPX_H -#include -#endif -#ifdef HAVE_PATHS_H -# include -#endif - -int -main () -{ - char *wtmpx = WTMPX_FILE; - ; - return 0; -} -configure:16220: result: no -configure:16334: creating ./config.status - -## ----------------------- ## -## Running config.status. ## -## ----------------------- ## - -This file was extended by config.status 2.52, executed with - CONFIG_FILES = - CONFIG_HEADERS = - CONFIG_LINKS = - CONFIG_COMMANDS = - > ./config.status -on gate - -config.status:16822: creating Makefile -config.status:16822: creating openbsd-compat/Makefile -config.status:16822: creating scard/Makefile -config.status:16822: creating ssh_prng_cmds -config.status:16914: creating config.h -config.status:17055: config.h is unchanged - -## ----------------- ## -## Cache variables. ## -## ----------------- ## - -ac_cv_build=i686-pc-linux-gnu -ac_cv_build_alias=i686-pc-linux-gnu -ac_cv_c_bigendian=no -ac_cv_c_compiler_gnu=yes -ac_cv_c_inline=inline -ac_cv_cc_implements___FUNCTION__=yes -ac_cv_cc_implements___func__=yes -ac_cv_env_CC_set= -ac_cv_env_CC_value= -ac_cv_env_CFLAGS_set= -ac_cv_env_CFLAGS_value= -ac_cv_env_CPPFLAGS_set= -ac_cv_env_CPPFLAGS_value= -ac_cv_env_CPP_set= -ac_cv_env_CPP_value= -ac_cv_env_LDFLAGS_set= -ac_cv_env_LDFLAGS_value= -ac_cv_env_build_alias_set= -ac_cv_env_build_alias_value= -ac_cv_env_host_alias_set= -ac_cv_env_host_alias_value= -ac_cv_env_target_alias_set= -ac_cv_env_target_alias_value= -ac_cv_file___dev_ptc_=no -ac_cv_file___etc_default_login_=no -ac_cv_func___b64_ntop=no -ac_cv_func___b64_pton=no -ac_cv_func__getpty=no -ac_cv_func_arc4random=no -ac_cv_func_b64_ntop=no -ac_cv_func_b64_pton=no -ac_cv_func_basename=yes -ac_cv_func_bcopy=yes -ac_cv_func_bindresvport_sa=no -ac_cv_func_clock=yes -ac_cv_func_daemon=yes -ac_cv_func_dirname=yes -ac_cv_func_endutent=yes -ac_cv_func_endutxent=yes -ac_cv_func_fchmod=yes -ac_cv_func_fchown=yes -ac_cv_func_freeaddrinfo=yes -ac_cv_func_futimes=no -ac_cv_func_gai_strerror=yes -ac_cv_func_getaddrinfo=yes -ac_cv_func_getcwd=yes -ac_cv_func_getgrouplist=yes -ac_cv_func_getnameinfo=yes -ac_cv_func_getopt=yes -ac_cv_func_getpagesize=yes -ac_cv_func_getpeereid=no -ac_cv_func_getpgrp_void=yes -ac_cv_func_getrlimit=yes -ac_cv_func_getspnam=yes -ac_cv_func_gettimeofday=yes -ac_cv_func_getttyent=yes -ac_cv_func_getutent=yes -ac_cv_func_getutid=yes -ac_cv_func_getutline=yes -ac_cv_func_getutxent=yes -ac_cv_func_getutxid=yes -ac_cv_func_getutxline=yes -ac_cv_func_glob=yes -ac_cv_func_inet_aton=yes -ac_cv_func_inet_ntoa=yes -ac_cv_func_inet_ntop=yes -ac_cv_func_innetgr=yes -ac_cv_func_login_getcapbool=no -ac_cv_func_logout=yes -ac_cv_func_logwtmp=yes -ac_cv_func_md5_crypt=no -ac_cv_func_memmove=yes -ac_cv_func_mkdtemp=yes -ac_cv_func_mmap=yes -ac_cv_func_ngetaddrinfo=no -ac_cv_func_nsleep=no -ac_cv_func_ogetaddrinfo=no -ac_cv_func_openlog_r=no -ac_cv_func_openpty=yes -ac_cv_func_pstat=no -ac_cv_func_pututline=yes -ac_cv_func_pututxline=yes -ac_cv_func_readpassphrase=no -ac_cv_func_realpath=yes -ac_cv_func_recvmsg=yes -ac_cv_func_rresvport_af=yes -ac_cv_func_sendmsg=yes -ac_cv_func_setdtablesize=no -ac_cv_func_setegid=yes -ac_cv_func_setenv=yes -ac_cv_func_seteuid=yes -ac_cv_func_setgroups=yes -ac_cv_func_setlogin=no -ac_cv_func_setpcred=no -ac_cv_func_setproctitle=no -ac_cv_func_setregid=yes -ac_cv_func_setresgid=yes -ac_cv_func_setresuid=yes -ac_cv_func_setreuid=yes -ac_cv_func_setrlimit=yes -ac_cv_func_setsid=yes -ac_cv_func_setsockopt=yes -ac_cv_func_setutent=yes -ac_cv_func_setutxent=yes -ac_cv_func_setvbuf=yes -ac_cv_func_sigaction=yes -ac_cv_func_sigvec=yes -ac_cv_func_snprintf=yes -ac_cv_func_socketpair=yes -ac_cv_func_strcasecmp=yes -ac_cv_func_strerror=yes -ac_cv_func_strftime=yes -ac_cv_func_strlcat=no -ac_cv_func_strlcpy=no -ac_cv_func_strmode=no -ac_cv_func_strnvis=no -ac_cv_func_strsep=yes -ac_cv_func_sysconf=yes -ac_cv_func_tcgetpgrp=yes -ac_cv_func_time=yes -ac_cv_func_truncate=yes -ac_cv_func_updwtmp=yes -ac_cv_func_utimes=yes -ac_cv_func_utmpname=yes -ac_cv_func_utmpxname=yes -ac_cv_func_vhangup=yes -ac_cv_func_vsnprintf=yes -ac_cv_func_waitpid=yes -ac_cv_func_yp_match=no -ac_cv_have___ss_family_in_struct_ss=no -ac_cv_have_accrights_in_msghdr=no -ac_cv_have_clock_t=yes -ac_cv_have_control_in_msghdr=yes -ac_cv_have_decl_getrusage=no -ac_cv_have_decl_strsep=yes -ac_cv_have_decl_tcsendbreak=yes -ac_cv_have_getopt_optreset=no -ac_cv_have_int64_t=yes -ac_cv_have_intxx_t=yes -ac_cv_have_mode_t=yes -ac_cv_have_pid_t=yes -ac_cv_have_pw_change_in_struct_passwd=no -ac_cv_have_pw_class_in_struct_passwd=no -ac_cv_have_pw_expire_in_struct_passwd=no -ac_cv_have_sa_family_t=yes -ac_cv_have_size_t=yes -ac_cv_have_ss_family_in_struct_ss=yes -ac_cv_have_ssize_t=yes -ac_cv_have_struct_addrinfo=yes -ac_cv_have_struct_in6_addr=yes -ac_cv_have_struct_sockaddr_in6=yes -ac_cv_have_struct_sockaddr_storage=yes -ac_cv_have_struct_timeval=yes -ac_cv_have_u_char=yes -ac_cv_have_u_int=yes -ac_cv_have_u_int64_t=yes -ac_cv_have_u_intxx_t=yes -ac_cv_header_bstring_h=no -ac_cv_header_crypt_h=yes -ac_cv_header_endian_h=yes -ac_cv_header_features_h=yes -ac_cv_header_floatingpoint_h=no -ac_cv_header_getopt_h=yes -ac_cv_header_glob_h=yes -ac_cv_header_ia_h=no -ac_cv_header_inttypes_h=yes -ac_cv_header_lastlog_h=yes -ac_cv_header_libgen_h=yes -ac_cv_header_libutil_h=no -ac_cv_header_limits_h=yes -ac_cv_header_login_cap_h=no -ac_cv_header_login_h=no -ac_cv_header_maillock_h=no -ac_cv_header_memory_h=yes -ac_cv_header_netdb_h=yes -ac_cv_header_netgroup_h=no -ac_cv_header_netinet_in_systm_h=yes -ac_cv_header_paths_h=yes -ac_cv_header_pty_h=yes -ac_cv_header_readpassphrase_h=no -ac_cv_header_rpc_types_h=yes -ac_cv_header_security_pam_appl_h=yes -ac_cv_header_shadow_h=yes -ac_cv_header_stdc=yes -ac_cv_header_stddef_h=yes -ac_cv_header_stdint_h=yes -ac_cv_header_stdlib_h=yes -ac_cv_header_string_h=yes -ac_cv_header_strings_h=yes -ac_cv_header_sys_audit_h=no -ac_cv_header_sys_bitypes_h=yes -ac_cv_header_sys_bsdtty_h=no -ac_cv_header_sys_cdefs_h=yes -ac_cv_header_sys_mman_h=yes -ac_cv_header_sys_pstat_h=no -ac_cv_header_sys_select_h=yes -ac_cv_header_sys_stat_h=yes -ac_cv_header_sys_stropts_h=yes -ac_cv_header_sys_strtio_h=no -ac_cv_header_sys_sysmacros_h=yes -ac_cv_header_sys_time_h=yes -ac_cv_header_sys_timers_h=no -ac_cv_header_sys_types_h=yes -ac_cv_header_sys_un_h=yes -ac_cv_header_time_h=yes -ac_cv_header_tmpdir_h=no -ac_cv_header_ttyent_h=yes -ac_cv_header_unistd_h=yes -ac_cv_header_usersec_h=no -ac_cv_header_util_h=no -ac_cv_header_utime_h=yes -ac_cv_header_utmp_h=yes -ac_cv_header_utmpx_h=yes -ac_cv_header_vis_h=no -ac_cv_host=i686-pc-linux-gnu -ac_cv_host_alias=i686-pc-linux-gnu -ac_cv_lib_crypt_crypt=yes -ac_cv_lib_nsl_yp_match=yes -ac_cv_lib_z_deflate=yes -ac_cv_libc_defines___progname=yes -ac_cv_libc_defines_sys_errlist=yes -ac_cv_libc_defines_sys_nerr=yes -ac_cv_member_struct_stat_st_blksize=yes -ac_cv_objext=o -ac_cv_path_AR=/usr/local/bin/ar -ac_cv_path_LOGIN_PROGRAM_FALLBACK=/bin/login -ac_cv_path_NROFF=/usr/bin/nroff -ac_cv_path_PERL=/usr/local/bin/perl -ac_cv_path_PROG_ARP=/sbin/arp -ac_cv_path_PROG_DF=/bin/df -ac_cv_path_PROG_IFCONFIG=/sbin/ifconfig -ac_cv_path_PROG_IPCS=/usr/bin/ipcs -ac_cv_path_PROG_LAST=/usr/bin/last -ac_cv_path_PROG_LASTLOG=/usr/bin/lastlog -ac_cv_path_PROG_LS=/bin/ls -ac_cv_path_PROG_NETSTAT=/bin/netstat -ac_cv_path_PROG_PS=/bin/ps -ac_cv_path_PROG_SAR=/usr/bin/sar -ac_cv_path_PROG_TAIL=/usr/bin/tail -ac_cv_path_PROG_UPTIME=/usr/bin/uptime -ac_cv_path_PROG_VMSTAT=/usr/bin/vmstat -ac_cv_path_PROG_W=/usr/bin/w -ac_cv_path_PROG_WHO=/usr/bin/who -ac_cv_path_SED=/bin/sed -ac_cv_path_SH=/bin/sh -ac_cv_path_TEST_MINUS_S_SH=/bin/bash -ac_cv_path_install='/usr/bin/install -c' -ac_cv_path_xauth_path=/usr/X11R6/bin/xauth -ac_cv_prog_AWK=gawk -ac_cv_prog_CPP='gcc -E' -ac_cv_prog_ac_ct_CC=gcc -ac_cv_prog_ac_ct_RANLIB=ranlib -ac_cv_prog_cc_g=yes -ac_cv_prog_cc_stdc= -ac_cv_search_basename='none required' -ac_cv_search_login=-lutil -ac_cv_search_nanosleep='none required' -ac_cv_sizeof_char=1 -ac_cv_sizeof_int=4 -ac_cv_sizeof_long_int=4 -ac_cv_sizeof_long_long_int=8 -ac_cv_sizeof_short_int=2 -ac_cv_sys_file_offset_bits=64 -ac_cv_sys_large_files=no -ac_cv_sys_largefile_CC=no -ac_cv_type_char=yes -ac_cv_type_int=yes -ac_cv_type_long_int=yes -ac_cv_type_long_long_int=yes -ac_cv_type_short_int=yes -ac_cv_type_sig_atomic_t=yes -ac_cv_type_socklen_t=yes -ac_cv_type_struct_timespec=yes -ossh_cv_utmp_h_has_ut_addr=yes -ossh_cv_utmp_h_has_ut_addr_v6=yes -ossh_cv_utmp_h_has_ut_exit=yes -ossh_cv_utmp_h_has_ut_host=yes -ossh_cv_utmp_h_has_ut_id=yes -ossh_cv_utmp_h_has_ut_pid=yes -ossh_cv_utmp_h_has_ut_time=no -ossh_cv_utmp_h_has_ut_tv=yes -ossh_cv_utmp_h_has_ut_type=yes -ossh_cv_utmpx_h_has_syslen=no -ossh_cv_utmpx_h_has_ut_addr=yes -ossh_cv_utmpx_h_has_ut_addr_v6=yes -ossh_cv_utmpx_h_has_ut_host=yes -ossh_cv_utmpx_h_has_ut_id=yes -ossh_cv_utmpx_h_has_ut_time=no -ossh_cv_utmpx_h_has_ut_tv=yes -ossh_cv_utmpx_h_has_ut_type=yes - -## ------------ ## -## confdefs.h. ## -## ------------ ## - -#define _FILE_OFFSET_BITS 64 -#define LOGIN_PROGRAM_FALLBACK "/bin/login" -#define DONT_TRY_OTHER_AF 1 -#define PAM_TTY_KLUDGE 1 -#define LOCKED_PASSWD_PREFIX "!!" -#define SPT_TYPE SPT_REUSEARGV -#define HAVE_CRYPT_H 1 -#define HAVE_ENDIAN_H 1 -#define HAVE_FEATURES_H 1 -#define HAVE_GETOPT_H 1 -#define HAVE_GLOB_H 1 -#define HAVE_LASTLOG_H 1 -#define HAVE_LIMITS_H 1 -#define HAVE_NETDB_H 1 -#define HAVE_NETINET_IN_SYSTM_H 1 -#define HAVE_PATHS_H 1 -#define HAVE_PTY_H 1 -#define HAVE_RPC_TYPES_H 1 -#define HAVE_SECURITY_PAM_APPL_H 1 -#define HAVE_SHADOW_H 1 -#define HAVE_STDDEF_H 1 -#define HAVE_STDINT_H 1 -#define HAVE_STRINGS_H 1 -#define HAVE_SYS_BITYPES_H 1 -#define HAVE_SYS_CDEFS_H 1 -#define HAVE_SYS_MMAN_H 1 -#define HAVE_SYS_SELECT_H 1 -#define HAVE_SYS_STAT_H 1 -#define HAVE_SYS_STROPTS_H 1 -#define HAVE_SYS_SYSMACROS_H 1 -#define HAVE_SYS_TIME_H 1 -#define HAVE_SYS_UN_H 1 -#define HAVE_TIME_H 1 -#define HAVE_TTYENT_H 1 -#define HAVE_UTIME_H 1 -#define HAVE_UTMP_H 1 -#define HAVE_UTMPX_H 1 -#define HAVE_LIBNSL 1 -#define HAVE_DIRNAME 1 -#define HAVE_LIBGEN_H 1 -#define HAVE_BASENAME 1 -#define HAVE_LIBZ 1 -#define HAVE_LOGIN 1 -#define HAVE_LOGOUT 1 -#define HAVE_UPDWTMP 1 -#define HAVE_LOGWTMP 1 -#define HAVE_STRFTIME 1 -#define GLOB_HAS_ALTDIRFUNC 1 -#define HAVE_BASENAME 1 -#define HAVE_BCOPY 1 -#define HAVE_CLOCK 1 -#define HAVE_FCHMOD 1 -#define HAVE_FCHOWN 1 -#define HAVE_FREEADDRINFO 1 -#define HAVE_GETADDRINFO 1 -#define HAVE_GETCWD 1 -#define HAVE_GETGROUPLIST 1 -#define HAVE_GETNAMEINFO 1 -#define HAVE_GETOPT 1 -#define HAVE_GETRLIMIT 1 -#define HAVE_GETTTYENT 1 -#define HAVE_GLOB 1 -#define HAVE_INET_ATON 1 -#define HAVE_INET_NTOA 1 -#define HAVE_INET_NTOP 1 -#define HAVE_INNETGR 1 -#define HAVE_MEMMOVE 1 -#define HAVE_MKDTEMP 1 -#define HAVE_MMAP 1 -#define HAVE_OPENPTY 1 -#define HAVE_REALPATH 1 -#define HAVE_RECVMSG 1 -#define HAVE_RRESVPORT_AF 1 -#define HAVE_SENDMSG 1 -#define HAVE_SETEGID 1 -#define HAVE_SETENV 1 -#define HAVE_SETEUID 1 -#define HAVE_SETGROUPS 1 -#define HAVE_SETREGID 1 -#define HAVE_SETRESGID 1 -#define HAVE_SETRESUID 1 -#define HAVE_SETREUID 1 -#define HAVE_SETRLIMIT 1 -#define HAVE_SETSID 1 -#define HAVE_SETVBUF 1 -#define HAVE_SIGACTION 1 -#define HAVE_SIGVEC 1 -#define HAVE_SNPRINTF 1 -#define HAVE_SOCKETPAIR 1 -#define HAVE_STRERROR 1 -#define HAVE_SYSCONF 1 -#define HAVE_TCGETPGRP 1 -#define HAVE_TRUNCATE 1 -#define HAVE_UTIMES 1 -#define HAVE_VHANGUP 1 -#define HAVE_VSNPRINTF 1 -#define HAVE_WAITPID 1 -#define HAVE_GAI_STRERROR 1 -#define HAVE_GAI_STRERROR 1 -#define HAVE_CONST_GAI_STRERROR_PROTO 1 -#define HAVE_NANOSLEEP 1 -#define STDC_HEADERS 1 -#define HAVE_SYS_TYPES_H 1 -#define HAVE_SYS_STAT_H 1 -#define HAVE_STDLIB_H 1 -#define HAVE_STRING_H 1 -#define HAVE_MEMORY_H 1 -#define HAVE_STRINGS_H 1 -#define HAVE_INTTYPES_H 1 -#define HAVE_STDINT_H 1 -#define HAVE_UNISTD_H 1 -#define HAVE_STRSEP 1 -#define HAVE_TCSENDBREAK 1 -#define HAVE_GETTIMEOFDAY 1 -#define HAVE_TIME 1 -#define HAVE_ENDUTENT 1 -#define HAVE_GETUTENT 1 -#define HAVE_GETUTID 1 -#define HAVE_GETUTLINE 1 -#define HAVE_PUTUTLINE 1 -#define HAVE_SETUTENT 1 -#define HAVE_UTMPNAME 1 -#define HAVE_ENDUTXENT 1 -#define HAVE_GETUTXENT 1 -#define HAVE_GETUTXID 1 -#define HAVE_GETUTXLINE 1 -#define HAVE_PUTUTXLINE 1 -#define HAVE_SETUTXENT 1 -#define HAVE_UTMPXNAME 1 -#define HAVE_DAEMON 1 -#define HAVE_GETPAGESIZE 1 -#define HAVE_STRICT_MKSTEMP 1 -#define GETPGRP_VOID 1 -#define HAVE_OPENSSL 1 -#define OPENSSL_PRNG_ONLY 1 -#define ENTROPY_TIMEOUT_MSEC 200 -#define SSH_PRIVSEP_USER "sshd" -#define SIZEOF_CHAR 1 -#define SIZEOF_SHORT_INT 2 -#define SIZEOF_INT 4 -#define SIZEOF_LONG_INT 4 -#define SIZEOF_LONG_LONG_INT 8 -#define HAVE_U_INT 1 -#define HAVE_INTXX_T 1 -#define HAVE_INT64_T 1 -#define HAVE_U_INTXX_T 1 -#define HAVE_U_INT64_T 1 -#define HAVE_UINTXX_T 1 -#define HAVE_U_CHAR 1 -#define HAVE_SIG_ATOMIC_T 1 -#define HAVE_SIZE_T 1 -#define HAVE_SSIZE_T 1 -#define HAVE_CLOCK_T 1 -#define HAVE_SA_FAMILY_T 1 -#define HAVE_PID_T 1 -#define HAVE_MODE_T 1 -#define HAVE_STRUCT_SOCKADDR_STORAGE 1 -#define HAVE_STRUCT_SOCKADDR_IN6 1 -#define HAVE_STRUCT_IN6_ADDR 1 -#define HAVE_STRUCT_ADDRINFO 1 -#define HAVE_STRUCT_TIMEVAL 1 -#define HAVE_STRUCT_TIMESPEC 1 -#define HAVE_HOST_IN_UTMP 1 -#define HAVE_HOST_IN_UTMPX 1 -#define HAVE_PID_IN_UTMP 1 -#define HAVE_TYPE_IN_UTMP 1 -#define HAVE_TYPE_IN_UTMPX 1 -#define HAVE_TV_IN_UTMP 1 -#define HAVE_ID_IN_UTMP 1 -#define HAVE_ID_IN_UTMPX 1 -#define HAVE_ADDR_IN_UTMP 1 -#define HAVE_ADDR_IN_UTMPX 1 -#define HAVE_ADDR_V6_IN_UTMP 1 -#define HAVE_ADDR_V6_IN_UTMPX 1 -#define HAVE_EXIT_IN_UTMP 1 -#define HAVE_TV_IN_UTMPX 1 -#define HAVE_STRUCT_STAT_ST_BLKSIZE 1 -#define HAVE_SS_FAMILY_IN_SS 1 -#define HAVE_CONTROL_IN_MSGHDR 1 -#define HAVE___PROGNAME 1 -#define HAVE___FUNCTION__ 1 -#define HAVE___func__ 1 -#define HAVE_SYS_ERRLIST 1 -#define HAVE_SYS_NERR 1 -#define XAUTH_PATH "/usr/X11R6/bin/xauth" -#define MAIL_DIRECTORY "/var/spool/mail" -#define HAS_SHADOW_EXPIRE 1 -#define USER_PATH "/usr/bin:/bin:/usr/sbin:/sbin:/opt/openssh/bin" -#define IPV4_IN_IPV6 1 -#define _PATH_SSH_PIDDIR "/var/run" -#define DISABLE_UTMPX 1 -#define DISABLE_WTMPX 1 - - -configure: exit 0 diff -ru --new-file openssh-3.7.1p2/config.status openssh-3.8p1/config.status --- openssh-3.7.1p2/config.status 2004-01-02 16:41:40.000000000 +1100 +++ openssh-3.8p1/config.status 1970-01-01 10:00:00.000000000 +1000 @@ -1,1121 +0,0 @@ -#! /bin/sh -# Generated automatically by configure. -# Run this file to recreate the current configuration. -# Compiler output produced by configure, useful for debugging -# configure, is in config.log if it exists. - -debug=false -SHELL=${CONFIG_SHELL-/bin/sh} -ac_cs_invocation="$0 $@" - -# Be Bourne compatible -if test -n "${ZSH_VERSION+set}" && (emulate sh) >/dev/null 2>&1; then - emulate sh - NULLCMD=: -elif test -n "${BASH_VERSION+set}" && (set -o posix) >/dev/null 2>&1; then - set -o posix -fi - -# Name of the executable. -as_me=`echo "$0" |sed 's,.*[\\/],,'` - -if expr a : '\(a\)' >/dev/null 2>&1; then - as_expr=expr -else - as_expr=false -fi - -rm -f conf$$ conf$$.exe conf$$.file -echo >conf$$.file -if ln -s conf$$.file conf$$ 2>/dev/null; then - # We could just check for DJGPP; but this test a) works b) is more generic - # and c) will remain valid once DJGPP supports symlinks (DJGPP 2.04). - if test -f conf$$.exe; then - # Don't use ln at all; we don't have any links - as_ln_s='cp -p' - else - as_ln_s='ln -s' - fi -elif ln conf$$.file conf$$ 2>/dev/null; then - as_ln_s=ln -else - as_ln_s='cp -p' -fi -rm -f conf$$ conf$$.exe conf$$.file - -as_executable_p="test -f" - -# Support unset when possible. -if (FOO=FOO; unset FOO) >/dev/null 2>&1; then - as_unset=unset -else - as_unset=false -fi - -# NLS nuisances. -$as_unset LANG || test "${LANG+set}" != set || { LANG=C; export LANG; } -$as_unset LC_ALL || test "${LC_ALL+set}" != set || { LC_ALL=C; export LC_ALL; } -$as_unset LC_TIME || test "${LC_TIME+set}" != set || { LC_TIME=C; export LC_TIME; } -$as_unset LC_CTYPE || test "${LC_CTYPE+set}" != set || { LC_CTYPE=C; export LC_CTYPE; } -$as_unset LANGUAGE || test "${LANGUAGE+set}" != set || { LANGUAGE=C; export LANGUAGE; } -$as_unset LC_COLLATE || test "${LC_COLLATE+set}" != set || { LC_COLLATE=C; export LC_COLLATE; } -$as_unset LC_NUMERIC || test "${LC_NUMERIC+set}" != set || { LC_NUMERIC=C; export LC_NUMERIC; } -$as_unset LC_MESSAGES || test "${LC_MESSAGES+set}" != set || { LC_MESSAGES=C; export LC_MESSAGES; } - -# IFS -# We need space, tab and new line, in precisely that order. -as_nl=' -' -IFS=" $as_nl" - -# CDPATH. -$as_unset CDPATH || test "${CDPATH+set}" != set || { CDPATH=:; export CDPATH; } - -exec 6>&1 - -config_files=" Makefile openbsd-compat/Makefile scard/Makefile ssh_prng_cmds" -config_headers=" config.h" - -ac_cs_usage="\ -\`$as_me' instantiates files from templates according to the -current configuration. - -Usage: $0 [OPTIONS] [FILE]... - - -h, --help print this help, then exit - -V, --version print version number, then exit - -d, --debug don't remove temporary files - --recheck update $as_me by reconfiguring in the same conditions - --file=FILE[:TEMPLATE] - instantiate the configuration file FILE - --header=FILE[:TEMPLATE] - instantiate the configuration header FILE - -Configuration files: -$config_files - -Configuration headers: -$config_headers - -Report bugs to ." -ac_cs_version="\ -config.status -configured by ./configure, generated by GNU Autoconf 2.52, - with options \"--with-ssl-dir=/usr/local/ssl --prefix=/opt/openssh --with-ldflags=-L/usr/local/lib\" - -Copyright 1992, 1993, 1994, 1995, 1996, 1998, 1999, 2000, 2001 -Free Software Foundation, Inc. -This config.status script is free software; the Free Software Foundation -gives unlimited permission to copy, distribute and modify it." -srcdir=. -INSTALL="/usr/bin/install -c" -# If no file are specified by the user, then we need to provide default -# value. By we need to know if files were specified by the user. -ac_need_defaults=: -while test $# != 0 -do - case $1 in - --*=*) - ac_option=`expr "x$1" : 'x\([^=]*\)='` - ac_optarg=`expr "x$1" : 'x[^=]*=\(.*\)'` - shift - set dummy "$ac_option" "$ac_optarg" ${1+"$@"} - shift - ;; - -*);; - *) # This is not an option, so the user has probably given explicit - # arguments. - ac_need_defaults=false;; - esac - - case $1 in - # Handling of the options. - -recheck | --recheck | --rechec | --reche | --rech | --rec | --re | --r) - echo "running /bin/sh ./configure " --with-ssl-dir=/usr/local/ssl --prefix=/opt/openssh --with-ldflags=-L/usr/local/lib " --no-create --no-recursion" - exec /bin/sh ./configure --with-ssl-dir=/usr/local/ssl --prefix=/opt/openssh --with-ldflags=-L/usr/local/lib --no-create --no-recursion ;; - --version | --vers* | -V ) - echo "$ac_cs_version"; exit 0 ;; - --he | --h) - # Conflict between --help and --header - { { echo "$as_me:16507: error: ambiguous option: $1 -Try \`$0 --help' for more information." >&5 -echo "$as_me: error: ambiguous option: $1 -Try \`$0 --help' for more information." >&2;} - { (exit 1); exit 1; }; };; - --help | --hel | -h ) - echo "$ac_cs_usage"; exit 0 ;; - --debug | --d* | -d ) - debug=: ;; - --file | --fil | --fi | --f ) - shift - CONFIG_FILES="$CONFIG_FILES $1" - ac_need_defaults=false;; - --header | --heade | --head | --hea ) - shift - CONFIG_HEADERS="$CONFIG_HEADERS $1" - ac_need_defaults=false;; - - # This is an error. - -*) { { echo "$as_me:16526: error: unrecognized option: $1 -Try \`$0 --help' for more information." >&5 -echo "$as_me: error: unrecognized option: $1 -Try \`$0 --help' for more information." >&2;} - { (exit 1); exit 1; }; } ;; - - *) ac_config_targets="$ac_config_targets $1" ;; - - esac - shift -done - -exec 5>>config.log -cat >&5 << _ACEOF - -## ----------------------- ## -## Running config.status. ## -## ----------------------- ## - -This file was extended by $as_me 2.52, executed with - CONFIG_FILES = $CONFIG_FILES - CONFIG_HEADERS = $CONFIG_HEADERS - CONFIG_LINKS = $CONFIG_LINKS - CONFIG_COMMANDS = $CONFIG_COMMANDS - > $ac_cs_invocation -on `(hostname || uname -n) 2>/dev/null | sed 1q` - -_ACEOF -for ac_config_target in $ac_config_targets -do - case "$ac_config_target" in - # Handling of arguments. - "Makefile" ) CONFIG_FILES="$CONFIG_FILES Makefile" ;; - "openbsd-compat/Makefile" ) CONFIG_FILES="$CONFIG_FILES openbsd-compat/Makefile" ;; - "scard/Makefile" ) CONFIG_FILES="$CONFIG_FILES scard/Makefile" ;; - "ssh_prng_cmds" ) CONFIG_FILES="$CONFIG_FILES ssh_prng_cmds" ;; - "config.h" ) CONFIG_HEADERS="$CONFIG_HEADERS config.h" ;; - *) { { echo "$as_me:16566: error: invalid argument: $ac_config_target" >&5 -echo "$as_me: error: invalid argument: $ac_config_target" >&2;} - { (exit 1); exit 1; }; };; - esac -done - -# If the user did not use the arguments to specify the items to instantiate, -# then the envvar interface is used. Set only those that are not. -# We use the long form for the default assignment because of an extremely -# bizarre bug on SunOS 4.1.3. -if $ac_need_defaults; then - test "${CONFIG_FILES+set}" = set || CONFIG_FILES=$config_files - test "${CONFIG_HEADERS+set}" = set || CONFIG_HEADERS=$config_headers -fi - -# Create a temporary directory, and hook for its removal unless debugging. -$debug || -{ - trap 'exit_status=$?; rm -rf $tmp && exit $exit_status' 0 - trap '{ (exit 1); exit 1; }' 1 2 13 15 -} - -# Create a (secure) tmp directory for tmp files. -: ${TMPDIR=/tmp} -{ - tmp=`(umask 077 && mktemp -d -q "$TMPDIR/csXXXXXX") 2>/dev/null` && - test -n "$tmp" && test -d "$tmp" -} || -{ - tmp=$TMPDIR/cs$$-$RANDOM - (umask 077 && mkdir $tmp) -} || -{ - echo "$me: cannot create a temporary directory in $TMPDIR" >&2 - { (exit 1); exit 1; } -} - - -# -# CONFIG_FILES section. -# - -# No need to generate the scripts if there are no CONFIG_FILES. -# This happens for instance when ./config.status config.h -if test -n "$CONFIG_FILES"; then - # Protect against being on the right side of a sed subst in config.status. - sed 's/,@/@@/; s/@,/@@/; s/,;t t$/@;t t/; /@;t t$/s/[\\&,]/\\&/g; - s/@@/,@/; s/@@/@,/; s/@;t t$/,;t t/' >$tmp/subs.sed <<\CEOF -s,@SHELL@,/bin/sh,;t t -s,@exec_prefix@,${prefix},;t t -s,@prefix@,/opt/openssh,;t t -s,@program_transform_name@,s,x,x,,;t t -s,@bindir@,${exec_prefix}/bin,;t t -s,@sbindir@,${exec_prefix}/sbin,;t t -s,@libexecdir@,${exec_prefix}/libexec,;t t -s,@datadir@,${prefix}/share,;t t -s,@sysconfdir@,${prefix}/etc,;t t -s,@sharedstatedir@,${prefix}/com,;t t -s,@localstatedir@,${prefix}/var,;t t -s,@libdir@,${exec_prefix}/lib,;t t -s,@includedir@,${prefix}/include,;t t -s,@oldincludedir@,/usr/include,;t t -s,@infodir@,${prefix}/info,;t t -s,@mandir@,${prefix}/man,;t t -s,@PACKAGE_NAME@,,;t t -s,@PACKAGE_TARNAME@,,;t t -s,@PACKAGE_VERSION@,,;t t -s,@PACKAGE_STRING@,,;t t -s,@PACKAGE_BUGREPORT@,,;t t -s,@build_alias@,,;t t -s,@host_alias@,,;t t -s,@target_alias@,,;t t -s,@ECHO_C@,,;t t -s,@ECHO_N@,-n,;t t -s,@ECHO_T@,,;t t -s,@PATH_SEPARATOR@,:,;t t -s,@DEFS@,-DHAVE_CONFIG_H,;t t -s,@LIBS@,-lutil -lz -lnsl -lcrypto -lcrypt ,;t t -s,@CC@,gcc,;t t -s,@CFLAGS@,-g -O2 -Wall -Wpointer-arith -Wno-uninitialized,;t t -s,@LDFLAGS@,-L/usr/local/ssl/lib -L/usr/local/lib,;t t -s,@CPPFLAGS@,-I/usr/local/ssl/include ,;t t -s,@ac_ct_CC@,gcc,;t t -s,@EXEEXT@,,;t t -s,@OBJEXT@,o,;t t -s,@build@,i686-pc-linux-gnu,;t t -s,@build_cpu@,i686,;t t -s,@build_vendor@,pc,;t t -s,@build_os@,linux-gnu,;t t -s,@host@,i686-pc-linux-gnu,;t t -s,@host_cpu@,i686,;t t -s,@host_vendor@,pc,;t t -s,@host_os@,linux-gnu,;t t -s,@AWK@,gawk,;t t -s,@CPP@,gcc -E,;t t -s,@RANLIB@,ranlib,;t t -s,@ac_ct_RANLIB@,ranlib,;t t -s,@INSTALL_PROGRAM@,${INSTALL},;t t -s,@INSTALL_SCRIPT@,${INSTALL},;t t -s,@INSTALL_DATA@,${INSTALL} -m 644,;t t -s,@AR@,/usr/local/bin/ar,;t t -s,@PERL@,/usr/local/bin/perl,;t t -s,@SED@,/bin/sed,;t t -s,@ENT@,,;t t -s,@TEST_MINUS_S_SH@,/bin/bash,;t t -s,@SH@,/bin/sh,;t t -s,@LOGIN_PROGRAM_FALLBACK@,/bin/login,;t t -s,@LD@,gcc,;t t -s,@LIBWRAP@,,;t t -s,@LIBPAM@,,;t t -s,@INSTALL_SSH_RAND_HELPER@,,;t t -s,@SSH_PRIVSEP_USER@,sshd,;t t -s,@PROG_LS@,/bin/ls,;t t -s,@PROG_NETSTAT@,/bin/netstat,;t t -s,@PROG_ARP@,/sbin/arp,;t t -s,@PROG_IFCONFIG@,/sbin/ifconfig,;t t -s,@PROG_JSTAT@,undef,;t t -s,@PROG_PS@,/bin/ps,;t t -s,@PROG_SAR@,/usr/bin/sar,;t t -s,@PROG_W@,/usr/bin/w,;t t -s,@PROG_WHO@,/usr/bin/who,;t t -s,@PROG_LAST@,/usr/bin/last,;t t -s,@PROG_LASTLOG@,/usr/bin/lastlog,;t t -s,@PROG_DF@,/bin/df,;t t -s,@PROG_VMSTAT@,/usr/bin/vmstat,;t t -s,@PROG_UPTIME@,/usr/bin/uptime,;t t -s,@PROG_IPCS@,/usr/bin/ipcs,;t t -s,@PROG_TAIL@,/usr/bin/tail,;t t -s,@INSTALL_SSH_PRNG_CMDS@,,;t t -s,@OPENSC_CONFIG@,,;t t -s,@PRIVSEP_PATH@,/var/empty,;t t -s,@xauth_path@,/usr/X11R6/bin/xauth,;t t -s,@STRIP_OPT@,-s,;t t -s,@XAUTH_PATH@,/usr/X11R6/bin/xauth,;t t -s,@NROFF@,/usr/bin/nroff,;t t -s,@MANTYPE@,doc,;t t -s,@mansubdir@,man,;t t -s,@user_path@,/usr/bin:/bin:/usr/sbin:/sbin:/opt/openssh/bin,;t t -s,@piddir@,/var/run,;t t -CEOF - - # Split the substitutions into bite-sized pieces for seds with - # small command number limits, like on Digital OSF/1 and HP-UX. - ac_max_sed_lines=48 - ac_sed_frag=1 # Number of current file. - ac_beg=1 # First line for current file. - ac_end=$ac_max_sed_lines # Line after last line for current file. - ac_more_lines=: - ac_sed_cmds= - while $ac_more_lines; do - if test $ac_beg -gt 1; then - sed "1,${ac_beg}d; ${ac_end}q" $tmp/subs.sed >$tmp/subs.frag - else - sed "${ac_end}q" $tmp/subs.sed >$tmp/subs.frag - fi - if test ! -s $tmp/subs.frag; then - ac_more_lines=false - else - # The purpose of the label and of the branching condition is to - # speed up the sed processing (if there are no `@' at all, there - # is no need to browse any of the substitutions). - # These are the two extra sed commands mentioned above. - (echo ':t - /@[a-zA-Z_][a-zA-Z_0-9]*@/!b' && cat $tmp/subs.frag) >$tmp/subs-$ac_sed_frag.sed - if test -z "$ac_sed_cmds"; then - ac_sed_cmds="sed -f $tmp/subs-$ac_sed_frag.sed" - else - ac_sed_cmds="$ac_sed_cmds | sed -f $tmp/subs-$ac_sed_frag.sed" - fi - ac_sed_frag=`expr $ac_sed_frag + 1` - ac_beg=$ac_end - ac_end=`expr $ac_end + $ac_max_sed_lines` - fi - done - if test -z "$ac_sed_cmds"; then - ac_sed_cmds=cat - fi -fi # test -n "$CONFIG_FILES" - -for ac_file in : $CONFIG_FILES; do test "x$ac_file" = x: && continue - # Support "outfile[:infile[:infile...]]", defaulting infile="outfile.in". - case $ac_file in - - | *:- | *:-:* ) # input from stdin - cat >$tmp/stdin - ac_file_in=`echo "$ac_file" | sed 's,[^:]*:,,'` - ac_file=`echo "$ac_file" | sed 's,:.*,,'` ;; - *:* ) ac_file_in=`echo "$ac_file" | sed 's,[^:]*:,,'` - ac_file=`echo "$ac_file" | sed 's,:.*,,'` ;; - * ) ac_file_in=$ac_file.in ;; - esac - - # Compute @srcdir@, @top_srcdir@, and @INSTALL@ for subdirectories. - ac_dir=`$as_expr X"$ac_file" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \ - X"$ac_file" : 'X\(//\)[^/]' \| \ - X"$ac_file" : 'X\(//\)$' \| \ - X"$ac_file" : 'X\(/\)' \| \ - . : '\(.\)' 2>/dev/null || -echo X"$ac_file" | - sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{ s//\1/; q; } - /^X\(\/\/\)[^/].*/{ s//\1/; q; } - /^X\(\/\/\)$/{ s//\1/; q; } - /^X\(\/\).*/{ s//\1/; q; } - s/.*/./; q'` - if test "$ac_dir" != "$ac_file" && test "$ac_dir" != .; then - { case "$ac_dir" in - [\\/]* | ?:[\\/]* ) as_incr_dir=;; - *) as_incr_dir=.;; -esac -as_dummy="$ac_dir" -for as_mkdir_dir in `IFS='/\\'; set X $as_dummy; shift; echo "$@"`; do - case $as_mkdir_dir in - # Skip DOS drivespec - ?:) as_incr_dir=$as_mkdir_dir ;; - *) - as_incr_dir=$as_incr_dir/$as_mkdir_dir - test -d "$as_incr_dir" || mkdir "$as_incr_dir" - ;; - esac -done; } - - ac_dir_suffix="/`echo $ac_dir|sed 's,^\./,,'`" - # A "../" for each directory in $ac_dir_suffix. - ac_dots=`echo "$ac_dir_suffix" | sed 's,/[^/]*,../,g'` - else - ac_dir_suffix= ac_dots= - fi - - case $srcdir in - .) ac_srcdir=. - if test -z "$ac_dots"; then - ac_top_srcdir=. - else - ac_top_srcdir=`echo $ac_dots | sed 's,/$,,'` - fi ;; - [\\/]* | ?:[\\/]* ) - ac_srcdir=$srcdir$ac_dir_suffix; - ac_top_srcdir=$srcdir ;; - *) # Relative path. - ac_srcdir=$ac_dots$srcdir$ac_dir_suffix - ac_top_srcdir=$ac_dots$srcdir ;; - esac - - case $INSTALL in - [\\/$]* | ?:[\\/]* ) ac_INSTALL=$INSTALL ;; - *) ac_INSTALL=$ac_dots$INSTALL ;; - esac - - if test x"$ac_file" != x-; then - { echo "$as_me:16822: creating $ac_file" >&5 -echo "$as_me: creating $ac_file" >&6;} - rm -f "$ac_file" - fi - # Let's still pretend it is `configure' which instantiates (i.e., don't - # use $as_me), people would be surprised to read: - # /* config.h. Generated automatically by config.status. */ - configure_input="Generated automatically from `echo $ac_file_in | - sed 's,.*/,,'` by configure." - - # First look for the input files in the build tree, otherwise in the - # src tree. - ac_file_inputs=`IFS=: - for f in $ac_file_in; do - case $f in - -) echo $tmp/stdin ;; - [\\/$]*) - # Absolute (can't be DOS-style, as IFS=:) - test -f "$f" || { { echo "$as_me:16840: error: cannot find input file: $f" >&5 -echo "$as_me: error: cannot find input file: $f" >&2;} - { (exit 1); exit 1; }; } - echo $f;; - *) # Relative - if test -f "$f"; then - # Build tree - echo $f - elif test -f "$srcdir/$f"; then - # Source tree - echo $srcdir/$f - else - # /dev/null tree - { { echo "$as_me:16853: error: cannot find input file: $f" >&5 -echo "$as_me: error: cannot find input file: $f" >&2;} - { (exit 1); exit 1; }; } - fi;; - esac - done` || { (exit 1); exit 1; } - sed "/^[ ]*VPATH[ ]*=/{ -s/:*\$(srcdir):*/:/; -s/:*\${srcdir}:*/:/; -s/:*@srcdir@:*/:/; -s/^\([^=]*=[ ]*\):*/\1/; -s/:*$//; -s/^[^=]*=[ ]*$//; -} - -:t -/@[a-zA-Z_][a-zA-Z_0-9]*@/!b -s,@configure_input@,$configure_input,;t t -s,@srcdir@,$ac_srcdir,;t t -s,@top_srcdir@,$ac_top_srcdir,;t t -s,@INSTALL@,$ac_INSTALL,;t t -" $ac_file_inputs | (eval "$ac_sed_cmds") >$tmp/out - rm -f $tmp/stdin - if test x"$ac_file" != x-; then - mv $tmp/out $ac_file - else - cat $tmp/out - rm -f $tmp/out - fi - -done - -# -# CONFIG_HEADER section. -# - -# These sed commands are passed to sed as "A NAME B NAME C VALUE D", where -# NAME is the cpp macro being defined and VALUE is the value it is being given. -# -# ac_d sets the value in "#define NAME VALUE" lines. -ac_dA='s,^\([ ]*\)#\([ ]*define[ ][ ]*\)' -ac_dB='[ ].*$,\1#\2' -ac_dC=' ' -ac_dD=',;t' -# ac_u turns "#undef NAME" without trailing blanks into "#define NAME VALUE". -ac_uA='s,^\([ ]*\)#\([ ]*\)undef\([ ][ ]*\)' -ac_uB='$,\1#\2define\3' -ac_uC=' ' -ac_uD=',;t' - -for ac_file in : $CONFIG_HEADERS; do test "x$ac_file" = x: && continue - # Support "outfile[:infile[:infile...]]", defaulting infile="outfile.in". - case $ac_file in - - | *:- | *:-:* ) # input from stdin - cat >$tmp/stdin - ac_file_in=`echo "$ac_file" | sed 's,[^:]*:,,'` - ac_file=`echo "$ac_file" | sed 's,:.*,,'` ;; - *:* ) ac_file_in=`echo "$ac_file" | sed 's,[^:]*:,,'` - ac_file=`echo "$ac_file" | sed 's,:.*,,'` ;; - * ) ac_file_in=$ac_file.in ;; - esac - - test x"$ac_file" != x- && { echo "$as_me:16914: creating $ac_file" >&5 -echo "$as_me: creating $ac_file" >&6;} - - # First look for the input files in the build tree, otherwise in the - # src tree. - ac_file_inputs=`IFS=: - for f in $ac_file_in; do - case $f in - -) echo $tmp/stdin ;; - [\\/$]*) - # Absolute (can't be DOS-style, as IFS=:) - test -f "$f" || { { echo "$as_me:16925: error: cannot find input file: $f" >&5 -echo "$as_me: error: cannot find input file: $f" >&2;} - { (exit 1); exit 1; }; } - echo $f;; - *) # Relative - if test -f "$f"; then - # Build tree - echo $f - elif test -f "$srcdir/$f"; then - # Source tree - echo $srcdir/$f - else - # /dev/null tree - { { echo "$as_me:16938: error: cannot find input file: $f" >&5 -echo "$as_me: error: cannot find input file: $f" >&2;} - { (exit 1); exit 1; }; } - fi;; - esac - done` || { (exit 1); exit 1; } - # Remove the trailing spaces. - sed 's/[ ]*$//' $ac_file_inputs >$tmp/in - - # Handle all the #define templates only if necessary. - if egrep "^[ ]*#[ ]*define" $tmp/in >/dev/null; then - # If there are no defines, we may have an empty if/fi - : - cat >$tmp/defines.sed <$tmp/out - rm -f $tmp/in - mv $tmp/out $tmp/in - - cat >$tmp/defines.sed <$tmp/out - rm -f $tmp/in - mv $tmp/out $tmp/in - - cat >$tmp/defines.sed <$tmp/out - rm -f $tmp/in - mv $tmp/out $tmp/in - - cat >$tmp/defines.sed <$tmp/out - rm -f $tmp/in - mv $tmp/out $tmp/in - - cat >$tmp/defines.sed <$tmp/out - rm -f $tmp/in - mv $tmp/out $tmp/in - - cat >$tmp/defines.sed <$tmp/out - rm -f $tmp/in - mv $tmp/out $tmp/in - - fi # egrep - - # Handle all the #undef templates - cat >$tmp/undefs.sed <$tmp/out - rm -f $tmp/in - mv $tmp/out $tmp/in - - cat >$tmp/undefs.sed <$tmp/out - rm -f $tmp/in - mv $tmp/out $tmp/in - - cat >$tmp/undefs.sed <$tmp/out - rm -f $tmp/in - mv $tmp/out $tmp/in - - cat >$tmp/undefs.sed <$tmp/out - rm -f $tmp/in - mv $tmp/out $tmp/in - - cat >$tmp/undefs.sed <$tmp/out - rm -f $tmp/in - mv $tmp/out $tmp/in - - cat >$tmp/undefs.sed <$tmp/out - rm -f $tmp/in - mv $tmp/out $tmp/in - - # Let's still pretend it is `configure' which instantiates (i.e., don't - # use $as_me), people would be surprised to read: - # /* config.h. Generated automatically by config.status. */ - if test x"$ac_file" = x-; then - echo "/* Generated automatically by configure. */" >$tmp/config.h - else - echo "/* $ac_file. Generated automatically by configure. */" >$tmp/config.h - fi - cat $tmp/in >>$tmp/config.h - rm -f $tmp/in - if test x"$ac_file" != x-; then - if cmp -s $ac_file $tmp/config.h 2>/dev/null; then - { echo "$as_me:17055: $ac_file is unchanged" >&5 -echo "$as_me: $ac_file is unchanged" >&6;} - else - ac_dir=`$as_expr X"$ac_file" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \ - X"$ac_file" : 'X\(//\)[^/]' \| \ - X"$ac_file" : 'X\(//\)$' \| \ - X"$ac_file" : 'X\(/\)' \| \ - . : '\(.\)' 2>/dev/null || -echo X"$ac_file" | - sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{ s//\1/; q; } - /^X\(\/\/\)[^/].*/{ s//\1/; q; } - /^X\(\/\/\)$/{ s//\1/; q; } - /^X\(\/\).*/{ s//\1/; q; } - s/.*/./; q'` - if test "$ac_dir" != "$ac_file" && test "$ac_dir" != .; then - { case "$ac_dir" in - [\\/]* | ?:[\\/]* ) as_incr_dir=;; - *) as_incr_dir=.;; -esac -as_dummy="$ac_dir" -for as_mkdir_dir in `IFS='/\\'; set X $as_dummy; shift; echo "$@"`; do - case $as_mkdir_dir in - # Skip DOS drivespec - ?:) as_incr_dir=$as_mkdir_dir ;; - *) - as_incr_dir=$as_incr_dir/$as_mkdir_dir - test -d "$as_incr_dir" || mkdir "$as_incr_dir" - ;; - esac -done; } - - fi - rm -f $ac_file - mv $tmp/config.h $ac_file - fi - else - cat $tmp/config.h - rm -f $tmp/config.h - fi -done - -{ (exit 0); exit 0; } diff -ru --new-file openssh-3.7.1p2/config.sub openssh-3.8p1/config.sub --- openssh-3.7.1p2/config.sub 2003-03-21 12:05:38.000000000 +1100 +++ openssh-3.8p1/config.sub 2003-11-21 23:48:55.000000000 +1100 @@ -162,10 +162,10 @@ os=-chorusos basic_machine=$1 ;; - -chorusrdb) - os=-chorusrdb + -chorusrdb) + os=-chorusrdb basic_machine=$1 - ;; + ;; -hiux*) os=-hiuxwe2 ;; @@ -748,7 +748,7 @@ pbb) basic_machine=m68k-tti ;; - pc532 | pc532-*) + pc532 | pc532-*) basic_machine=ns32k-pc532 ;; pentium | p5 | k5 | k6 | nexgen | viac3) @@ -775,22 +775,22 @@ power) basic_machine=power-ibm ;; ppc) basic_machine=powerpc-unknown - ;; + ;; ppc-*) basic_machine=powerpc-`echo $basic_machine | sed 's/^[^-]*-//'` ;; ppcle | powerpclittle | ppc-le | powerpc-little) basic_machine=powerpcle-unknown - ;; + ;; ppcle-* | powerpclittle-*) basic_machine=powerpcle-`echo $basic_machine | sed 's/^[^-]*-//'` ;; ppc64) basic_machine=powerpc64-unknown - ;; + ;; ppc64-*) basic_machine=powerpc64-`echo $basic_machine | sed 's/^[^-]*-//'` ;; ppc64le | powerpc64little | ppc64-le | powerpc64-little) basic_machine=powerpc64le-unknown - ;; + ;; ppc64le-* | powerpc64little-*) basic_machine=powerpc64le-`echo $basic_machine | sed 's/^[^-]*-//'` ;; @@ -886,11 +886,11 @@ sun386 | sun386i | roadrunner) basic_machine=i386-sun ;; - sv1) + sv1) basic_machine=sv1-cray os=-unicos ;; - sx*-nec) + sx*-nec) basic_machine=sx6-nec os=-sysv ;; @@ -948,8 +948,8 @@ os=-vms ;; vpp*|vx|vx-*) - basic_machine=f301-fujitsu - ;; + basic_machine=f301-fujitsu + ;; vxworks960) basic_machine=i960-wrs os=-vxworks @@ -974,7 +974,7 @@ basic_machine=i386-pc os=-windows32-msvcrt ;; - xps | xps100) + xps | xps100) basic_machine=xps100-honeywell ;; ymp) @@ -1029,7 +1029,7 @@ sparc | sparcv9 | sparcv9b) basic_machine=sparc-sun ;; - cydra) + cydra) basic_machine=cydra-cydrome ;; orion) @@ -1074,8 +1074,8 @@ if [ x"$os" != x"" ] then case $os in - # First match some system type aliases - # that might get confused with valid system types. + # First match some system type aliases + # that might get confused with valid system types. # -solaris* is a basic system type, with this one exception. -solaris1 | -solaris1.*) os=`echo $os | sed -e 's|solaris1|sunos4|'` @@ -1179,7 +1179,7 @@ os=-rtmk-nova ;; -ns2 ) - os=-nextstep2 + os=-nextstep2 ;; -nsk*) os=-nsk @@ -1218,8 +1218,8 @@ -xenix) os=-xenix ;; - -*mint | -mint[0-9]* | -*MiNT | -MiNT[0-9]*) - os=-mint + -*mint | -mint[0-9]* | -*MiNT | -MiNT[0-9]*) + os=-mint ;; -none) ;; @@ -1256,7 +1256,7 @@ pdp10-*) os=-tops20 ;; - pdp11-*) + pdp11-*) os=-none ;; *-dec | vax-*) @@ -1349,19 +1349,19 @@ *-next) os=-nextstep3 ;; - *-gould) + *-gould) os=-sysv ;; - *-highlevel) + *-highlevel) os=-bsd ;; *-encore) os=-bsd ;; - *-sgi) + *-sgi) os=-irix ;; - *-siemens) + *-siemens) os=-sysv4 ;; *-masscomp) diff -ru --new-file openssh-3.7.1p2/configure openssh-3.8p1/configure --- openssh-3.7.1p2/configure 2003-09-23 19:55:43.000000000 +1000 +++ openssh-3.8p1/configure 2004-02-24 17:22:59.000000000 +1100 @@ -682,17 +682,18 @@ Optional Packages: --with-PACKAGE[=ARG] use PACKAGE [ARG=yes] --without-PACKAGE do not use PACKAGE (same as --with-PACKAGE=no) + --without-rpath Disable auto-added -R linker paths --with-osfsia Enable Digital Unix SIA --with-cflags Specify additional flags to pass to compiler --with-cppflags Specify additional flags to pass to preprocessor --with-ldflags Specify additional flags to pass to linker --with-libs Specify additional libraries to link with - --without-rpath Disable auto-added -R linker paths --with-zlib=PATH Use zlib in PATH + --without-zlib-version-check Disable zlib version check --with-skey[=PATH] Enable S/Key support - (optionally in PATH) + (optionally in PATH) --with-tcp-wrappers[=PATH] Enable tcpwrappers support - (optionally in PATH) + (optionally in PATH) --with-pam Enable PAM support --with-ssl-dir=PATH Specify path to OpenSSL installation --with-rand-helper Use subprocess to gather strong randomness @@ -702,7 +703,6 @@ --with-privsep-user=user Specify non-privileged user for privilege separation --with-sectok Enable smartcard support using libsectok --with-opensc=PFX Enable smartcard support using OpenSC - --with-dns Support for fetching keys from DNS (experimental) --with-kerberos5=PATH Enable Kerberos 5 support --with-privsep-path=xxx Path for privilege separation chroot (default=/var/empty) --with-xauth=PATH Specify path to xauth program @@ -2946,11 +2946,55 @@ fi fi +# Extract the first word of "passwd", so it can be a program name with args. +set dummy passwd; ac_word=$2 +echo "$as_me:2951: checking for $ac_word" >&5 +echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 +if test "${ac_cv_path_PATH_PASSWD_PROG+set}" = set; then + echo $ECHO_N "(cached) $ECHO_C" >&6 +else + case $PATH_PASSWD_PROG in + [\\/]* | ?:[\\/]*) + ac_cv_path_PATH_PASSWD_PROG="$PATH_PASSWD_PROG" # Let the user override the test with a path. + ;; + *) + ac_save_IFS=$IFS; IFS=$ac_path_separator +ac_dummy="$PATH" +for ac_dir in $ac_dummy; do + IFS=$ac_save_IFS + test -z "$ac_dir" && ac_dir=. + if $as_executable_p "$ac_dir/$ac_word"; then + ac_cv_path_PATH_PASSWD_PROG="$ac_dir/$ac_word" + echo "$as_me:2968: found $ac_dir/$ac_word" >&5 + break +fi +done + + ;; +esac +fi +PATH_PASSWD_PROG=$ac_cv_path_PATH_PASSWD_PROG + +if test -n "$PATH_PASSWD_PROG"; then + echo "$as_me:2979: result: $PATH_PASSWD_PROG" >&5 +echo "${ECHO_T}$PATH_PASSWD_PROG" >&6 +else + echo "$as_me:2982: result: no" >&5 +echo "${ECHO_T}no" >&6 +fi + +if test ! -z "$PATH_PASSWD_PROG" ; then + cat >>confdefs.h <&5 +echo "$as_me:2997: checking for $CC option to accept ANSI C" >&5 echo $ECHO_N "checking for $CC option to accept ANSI C... $ECHO_C" >&6 if test "${ac_cv_prog_cc_stdc+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -2958,7 +3002,7 @@ ac_cv_prog_cc_stdc=no ac_save_CC=$CC cat >conftest.$ac_ext <<_ACEOF -#line 2961 "configure" +#line 3005 "configure" #include "confdefs.h" #include #include @@ -3007,16 +3051,16 @@ do CC="$ac_save_CC $ac_arg" rm -f conftest.$ac_objext -if { (eval echo "$as_me:3010: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:3054: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:3013: \$? = $ac_status" >&5 + echo "$as_me:3057: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:3016: \"$ac_try\"") >&5 + { (eval echo "$as_me:3060: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:3019: \$? = $ac_status" >&5 + echo "$as_me:3063: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_prog_cc_stdc=$ac_arg break @@ -3033,15 +3077,15 @@ case "x$ac_cv_prog_cc_stdc" in x|xno) - echo "$as_me:3036: result: none needed" >&5 + echo "$as_me:3080: result: none needed" >&5 echo "${ECHO_T}none needed" >&6 ;; *) - echo "$as_me:3039: result: $ac_cv_prog_cc_stdc" >&5 + echo "$as_me:3083: result: $ac_cv_prog_cc_stdc" >&5 echo "${ECHO_T}$ac_cv_prog_cc_stdc" >&6 CC="$CC $ac_cv_prog_cc_stdc" ;; esac -echo "$as_me:3044: checking for inline" >&5 +echo "$as_me:3088: checking for inline" >&5 echo $ECHO_N "checking for inline... $ECHO_C" >&6 if test "${ac_cv_c_inline+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -3049,7 +3093,7 @@ ac_cv_c_inline=no for ac_kw in inline __inline__ __inline; do cat >conftest.$ac_ext <<_ACEOF -#line 3052 "configure" +#line 3096 "configure" #include "confdefs.h" #ifndef __cplusplus static $ac_kw int static_foo () {return 0; } @@ -3058,16 +3102,16 @@ _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:3061: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:3105: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:3064: \$? = $ac_status" >&5 + echo "$as_me:3108: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:3067: \"$ac_try\"") >&5 + { (eval echo "$as_me:3111: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:3070: \$? = $ac_status" >&5 + echo "$as_me:3114: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_c_inline=$ac_kw; break else @@ -3078,7 +3122,7 @@ done fi -echo "$as_me:3081: result: $ac_cv_c_inline" >&5 +echo "$as_me:3125: result: $ac_cv_c_inline" >&5 echo "${ECHO_T}$ac_cv_c_inline" >&6 case $ac_cv_c_inline in inline | yes) ;; @@ -3097,22 +3141,33 @@ CFLAGS="$CFLAGS -Wall -Wpointer-arith -Wno-uninitialized" fi +# Check whether --with-rpath or --without-rpath was given. +if test "${with_rpath+set}" = set; then + withval="$with_rpath" + + if test "x$withval" = "xno" ; then + need_dash_r="" + fi + if test "x$withval" = "xyes" ; then + need_dash_r=1 + fi + +fi; + # Check for some target-specific stuff case "$host" in *-*-aix*) - CPPFLAGS="$CPPFLAGS -I/usr/local/include" - LDFLAGS="$LDFLAGS -L/usr/local/lib" - echo "$as_me:3105: checking how to specify blibpath for linker ($LD)" >&5 + echo "$as_me:3160: checking how to specify blibpath for linker ($LD)" >&5 echo $ECHO_N "checking how to specify blibpath for linker ($LD)... $ECHO_C" >&6 if (test -z "$blibpath"); then - blibpath="/usr/lib:/lib:/usr/local/lib" + blibpath="/usr/lib:/lib" fi saved_LDFLAGS="$LDFLAGS" for tryflags in -blibpath: -Wl,-blibpath: -Wl,-rpath, ;do if (test -z "$blibflags"); then LDFLAGS="$saved_LDFLAGS $tryflags$blibpath" cat >conftest.$ac_ext <<_ACEOF -#line 3115 "configure" +#line 3170 "configure" #include "confdefs.h" int @@ -3124,16 +3179,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:3127: \"$ac_link\"") >&5 +if { (eval echo "$as_me:3182: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:3130: \$? = $ac_status" >&5 + echo "$as_me:3185: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:3133: \"$ac_try\"") >&5 + { (eval echo "$as_me:3188: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:3136: \$? = $ac_status" >&5 + echo "$as_me:3191: \$? = $ac_status" >&5 (exit $ac_status); }; }; then blibflags=$tryflags else @@ -3144,23 +3199,23 @@ fi done if (test -z "$blibflags"); then - echo "$as_me:3147: result: not found" >&5 + echo "$as_me:3202: result: not found" >&5 echo "${ECHO_T}not found" >&6 - { { echo "$as_me:3149: error: *** must be able to specify blibpath on AIX - check config.log" >&5 + { { echo "$as_me:3204: error: *** must be able to specify blibpath on AIX - check config.log" >&5 echo "$as_me: error: *** must be able to specify blibpath on AIX - check config.log" >&2;} { (exit 1); exit 1; }; } else - echo "$as_me:3153: result: $blibflags" >&5 + echo "$as_me:3208: result: $blibflags" >&5 echo "${ECHO_T}$blibflags" >&6 fi LDFLAGS="$saved_LDFLAGS" - echo "$as_me:3157: checking for authenticate" >&5 + echo "$as_me:3212: checking for authenticate" >&5 echo $ECHO_N "checking for authenticate... $ECHO_C" >&6 if test "${ac_cv_func_authenticate+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 3163 "configure" +#line 3218 "configure" #include "confdefs.h" /* System header to define __stub macros and hopefully few prototypes, which can conflict with char authenticate (); below. */ @@ -3191,16 +3246,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:3194: \"$ac_link\"") >&5 +if { (eval echo "$as_me:3249: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:3197: \$? = $ac_status" >&5 + echo "$as_me:3252: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:3200: \"$ac_try\"") >&5 + { (eval echo "$as_me:3255: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:3203: \$? = $ac_status" >&5 + echo "$as_me:3258: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_func_authenticate=yes else @@ -3210,7 +3265,7 @@ fi rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:3213: result: $ac_cv_func_authenticate" >&5 +echo "$as_me:3268: result: $ac_cv_func_authenticate" >&5 echo "${ECHO_T}$ac_cv_func_authenticate" >&6 if test $ac_cv_func_authenticate = yes; then cat >>confdefs.h <<\EOF @@ -3218,7 +3273,7 @@ EOF else - echo "$as_me:3221: checking for authenticate in -ls" >&5 + echo "$as_me:3276: checking for authenticate in -ls" >&5 echo $ECHO_N "checking for authenticate in -ls... $ECHO_C" >&6 if test "${ac_cv_lib_s_authenticate+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -3226,7 +3281,7 @@ ac_check_lib_save_LIBS=$LIBS LIBS="-ls $LIBS" cat >conftest.$ac_ext <<_ACEOF -#line 3229 "configure" +#line 3284 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -3245,16 +3300,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:3248: \"$ac_link\"") >&5 +if { (eval echo "$as_me:3303: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:3251: \$? = $ac_status" >&5 + echo "$as_me:3306: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:3254: \"$ac_try\"") >&5 + { (eval echo "$as_me:3309: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:3257: \$? = $ac_status" >&5 + echo "$as_me:3312: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_lib_s_authenticate=yes else @@ -3265,7 +3320,7 @@ rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi -echo "$as_me:3268: result: $ac_cv_lib_s_authenticate" >&5 +echo "$as_me:3323: result: $ac_cv_lib_s_authenticate" >&5 echo "${ECHO_T}$ac_cv_lib_s_authenticate" >&6 if test $ac_cv_lib_s_authenticate = yes; then cat >>confdefs.h <<\EOF @@ -3278,13 +3333,13 @@ fi - echo "$as_me:3281: checking whether loginfailed is declared" >&5 + echo "$as_me:3336: checking whether loginfailed is declared" >&5 echo $ECHO_N "checking whether loginfailed is declared... $ECHO_C" >&6 if test "${ac_cv_have_decl_loginfailed+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 3287 "configure" +#line 3342 "configure" #include "confdefs.h" #include @@ -3300,16 +3355,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:3303: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:3358: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:3306: \$? = $ac_status" >&5 + echo "$as_me:3361: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:3309: \"$ac_try\"") >&5 + { (eval echo "$as_me:3364: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:3312: \$? = $ac_status" >&5 + echo "$as_me:3367: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_have_decl_loginfailed=yes else @@ -3319,13 +3374,13 @@ fi rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:3322: result: $ac_cv_have_decl_loginfailed" >&5 +echo "$as_me:3377: result: $ac_cv_have_decl_loginfailed" >&5 echo "${ECHO_T}$ac_cv_have_decl_loginfailed" >&6 if test $ac_cv_have_decl_loginfailed = yes; then - echo "$as_me:3325: checking if loginfailed takes 4 arguments" >&5 + echo "$as_me:3380: checking if loginfailed takes 4 arguments" >&5 echo $ECHO_N "checking if loginfailed takes 4 arguments... $ECHO_C" >&6 cat >conftest.$ac_ext <<_ACEOF -#line 3328 "configure" +#line 3383 "configure" #include "confdefs.h" #include int @@ -3337,18 +3392,18 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:3340: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:3395: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:3343: \$? = $ac_status" >&5 + echo "$as_me:3398: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:3346: \"$ac_try\"") >&5 + { (eval echo "$as_me:3401: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:3349: \$? = $ac_status" >&5 + echo "$as_me:3404: \$? = $ac_status" >&5 (exit $ac_status); }; }; then - echo "$as_me:3351: result: yes" >&5 + echo "$as_me:3406: result: yes" >&5 echo "${ECHO_T}yes" >&6 cat >>confdefs.h <<\EOF #define AIX_LOGINFAILED_4ARG 1 @@ -3357,7 +3412,7 @@ else echo "$as_me: failed program was:" >&5 cat conftest.$ac_ext >&5 -echo "$as_me:3360: result: no" >&5 +echo "$as_me:3415: result: no" >&5 echo "${ECHO_T}no" >&6 fi @@ -3367,13 +3422,13 @@ for ac_func in setauthdb do as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh` -echo "$as_me:3370: checking for $ac_func" >&5 +echo "$as_me:3425: checking for $ac_func" >&5 echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6 if eval "test \"\${$as_ac_var+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 3376 "configure" +#line 3431 "configure" #include "confdefs.h" /* System header to define __stub macros and hopefully few prototypes, which can conflict with char $ac_func (); below. */ @@ -3404,16 +3459,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:3407: \"$ac_link\"") >&5 +if { (eval echo "$as_me:3462: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:3410: \$? = $ac_status" >&5 + echo "$as_me:3465: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:3413: \"$ac_try\"") >&5 + { (eval echo "$as_me:3468: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:3416: \$? = $ac_status" >&5 + echo "$as_me:3471: \$? = $ac_status" >&5 (exit $ac_status); }; }; then eval "$as_ac_var=yes" else @@ -3423,7 +3478,7 @@ fi rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:3426: result: `eval echo '${'$as_ac_var'}'`" >&5 +echo "$as_me:3481: result: `eval echo '${'$as_ac_var'}'`" >&5 echo "${ECHO_T}`eval echo '${'$as_ac_var'}'`" >&6 if test `eval echo '${'$as_ac_var'}'` = yes; then cat >>confdefs.h <>confdefs.h <<\EOF +#define SETEUID_BREAKS_SETUID 1 +EOF + + cat >>confdefs.h <<\EOF +#define BROKEN_SETREUID 1 +EOF + + cat >>confdefs.h <<\EOF +#define BROKEN_SETREGID 1 +EOF + ;; *-*-darwin*) - echo "$as_me:3512: checking if we have working getaddrinfo" >&5 + echo "$as_me:3579: checking if we have working getaddrinfo" >&5 echo $ECHO_N "checking if we have working getaddrinfo... $ECHO_C" >&6 if test "$cross_compiling" = yes; then - echo "$as_me:3515: result: assume it is working" >&5 + echo "$as_me:3582: result: assume it is working" >&5 echo "${ECHO_T}assume it is working" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 3519 "configure" +#line 3586 "configure" #include "confdefs.h" #include main() { if (NSVersionOfRunTimeLibrary("System") >= (60 << 16)) @@ -3526,23 +3593,23 @@ } _ACEOF rm -f conftest$ac_exeext -if { (eval echo "$as_me:3529: \"$ac_link\"") >&5 +if { (eval echo "$as_me:3596: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:3532: \$? = $ac_status" >&5 + echo "$as_me:3599: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='./conftest$ac_exeext' - { (eval echo "$as_me:3534: \"$ac_try\"") >&5 + { (eval echo "$as_me:3601: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:3537: \$? = $ac_status" >&5 + echo "$as_me:3604: \$? = $ac_status" >&5 (exit $ac_status); }; }; then - echo "$as_me:3539: result: working" >&5 + echo "$as_me:3606: result: working" >&5 echo "${ECHO_T}working" >&6 else echo "$as_me: program exited with status $ac_status" >&5 echo "$as_me: failed program was:" >&5 cat conftest.$ac_ext >&5 -echo "$as_me:3545: result: buggy" >&5 +echo "$as_me:3612: result: buggy" >&5 echo "${ECHO_T}buggy" >&6 cat >>confdefs.h <<\EOF #define BROKEN_GETADDRINFO 1 @@ -3563,6 +3630,10 @@ #define BROKEN_SETREGID 1 EOF + cat >>confdefs.h <>confdefs.h <<\EOF -#define DISABLE_SHADOW 1 -EOF - - cat >>confdefs.h <<\EOF -#define DISABLE_UTMP 1 -EOF - - cat >>confdefs.h <<\EOF #define LOCKED_PASSWD_STRING "*" EOF @@ -3604,7 +3667,7 @@ LIBS="$LIBS -lsec -lsecpw" -echo "$as_me:3607: checking for t_error in -lxnet" >&5 +echo "$as_me:3670: checking for t_error in -lxnet" >&5 echo $ECHO_N "checking for t_error in -lxnet... $ECHO_C" >&6 if test "${ac_cv_lib_xnet_t_error+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -3612,7 +3675,7 @@ ac_check_lib_save_LIBS=$LIBS LIBS="-lxnet $LIBS" cat >conftest.$ac_ext <<_ACEOF -#line 3615 "configure" +#line 3678 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -3631,16 +3694,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:3634: \"$ac_link\"") >&5 +if { (eval echo "$as_me:3697: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:3637: \$? = $ac_status" >&5 + echo "$as_me:3700: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:3640: \"$ac_try\"") >&5 + { (eval echo "$as_me:3703: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:3643: \$? = $ac_status" >&5 + echo "$as_me:3706: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_lib_xnet_t_error=yes else @@ -3651,7 +3714,7 @@ rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi -echo "$as_me:3654: result: $ac_cv_lib_xnet_t_error" >&5 +echo "$as_me:3717: result: $ac_cv_lib_xnet_t_error" >&5 echo "${ECHO_T}$ac_cv_lib_xnet_t_error" >&6 if test $ac_cv_lib_xnet_t_error = yes; then cat >>confdefs.h <&5 + { { echo "$as_me:3727: error: *** -lxnet needed on HP-UX - check config.log ***" >&5 echo "$as_me: error: *** -lxnet needed on HP-UX - check config.log ***" >&2;} { (exit 1); exit 1; }; } fi @@ -3687,14 +3750,6 @@ EOF cat >>confdefs.h <<\EOF -#define DISABLE_SHADOW 1 -EOF - - cat >>confdefs.h <<\EOF -#define DISABLE_UTMP 1 -EOF - - cat >>confdefs.h <<\EOF #define LOCKED_PASSWD_STRING "*" EOF @@ -3704,7 +3759,7 @@ LIBS="$LIBS -lsec" -echo "$as_me:3707: checking for t_error in -lxnet" >&5 +echo "$as_me:3762: checking for t_error in -lxnet" >&5 echo $ECHO_N "checking for t_error in -lxnet... $ECHO_C" >&6 if test "${ac_cv_lib_xnet_t_error+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -3712,7 +3767,7 @@ ac_check_lib_save_LIBS=$LIBS LIBS="-lxnet $LIBS" cat >conftest.$ac_ext <<_ACEOF -#line 3715 "configure" +#line 3770 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -3731,16 +3786,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:3734: \"$ac_link\"") >&5 +if { (eval echo "$as_me:3789: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:3737: \$? = $ac_status" >&5 + echo "$as_me:3792: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:3740: \"$ac_try\"") >&5 + { (eval echo "$as_me:3795: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:3743: \$? = $ac_status" >&5 + echo "$as_me:3798: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_lib_xnet_t_error=yes else @@ -3751,7 +3806,7 @@ rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi -echo "$as_me:3754: result: $ac_cv_lib_xnet_t_error" >&5 +echo "$as_me:3809: result: $ac_cv_lib_xnet_t_error" >&5 echo "${ECHO_T}$ac_cv_lib_xnet_t_error" >&6 if test $ac_cv_lib_xnet_t_error = yes; then cat >>confdefs.h <&5 + { { echo "$as_me:3819: error: *** -lxnet needed on HP-UX - check config.log ***" >&5 echo "$as_me: error: *** -lxnet needed on HP-UX - check config.log ***" >&2;} { (exit 1); exit 1; }; } fi @@ -3787,10 +3842,6 @@ EOF cat >>confdefs.h <<\EOF -#define DISABLE_SHADOW 1 -EOF - - cat >>confdefs.h <<\EOF #define DISABLE_UTMP 1 EOF @@ -3802,9 +3853,16 @@ #define SPT_TYPE SPT_PSTAT EOF + case "$host" in + *-*-hpux11.11*) + cat >>confdefs.h <<\EOF +#define BROKEN_GETADDRINFO 1 +EOF +;; + esac LIBS="$LIBS -lsec" -echo "$as_me:3807: checking for t_error in -lxnet" >&5 +echo "$as_me:3865: checking for t_error in -lxnet" >&5 echo $ECHO_N "checking for t_error in -lxnet... $ECHO_C" >&6 if test "${ac_cv_lib_xnet_t_error+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -3812,7 +3870,7 @@ ac_check_lib_save_LIBS=$LIBS LIBS="-lxnet $LIBS" cat >conftest.$ac_ext <<_ACEOF -#line 3815 "configure" +#line 3873 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -3831,16 +3889,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:3834: \"$ac_link\"") >&5 +if { (eval echo "$as_me:3892: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:3837: \$? = $ac_status" >&5 + echo "$as_me:3895: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:3840: \"$ac_try\"") >&5 + { (eval echo "$as_me:3898: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:3843: \$? = $ac_status" >&5 + echo "$as_me:3901: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_lib_xnet_t_error=yes else @@ -3851,7 +3909,7 @@ rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi -echo "$as_me:3854: result: $ac_cv_lib_xnet_t_error" >&5 +echo "$as_me:3912: result: $ac_cv_lib_xnet_t_error" >&5 echo "${ECHO_T}$ac_cv_lib_xnet_t_error" >&6 if test $ac_cv_lib_xnet_t_error = yes; then cat >>confdefs.h <&5 + { { echo "$as_me:3922: error: *** -lxnet needed on HP-UX - check config.log ***" >&5 echo "$as_me: error: *** -lxnet needed on HP-UX - check config.log ***" >&2;} { (exit 1); exit 1; }; } fi ;; *-*-irix5*) - CPPFLAGS="$CPPFLAGS -I/usr/local/include" - LDFLAGS="$LDFLAGS" PATH="$PATH:/usr/etc" cat >>confdefs.h <<\EOF #define BROKEN_INET_NTOA 1 EOF cat >>confdefs.h <<\EOF +#define SETEUID_BREAKS_SETUID 1 +EOF + + cat >>confdefs.h <<\EOF +#define BROKEN_SETREUID 1 +EOF + + cat >>confdefs.h <<\EOF +#define BROKEN_SETREGID 1 +EOF + + cat >>confdefs.h <<\EOF #define WITH_ABBREV_NO_TTY 1 EOF @@ -3885,8 +3953,6 @@ ;; *-*-irix6*) - CPPFLAGS="$CPPFLAGS -I/usr/local/include" - LDFLAGS="$LDFLAGS" PATH="$PATH:/usr/etc" cat >>confdefs.h <<\EOF #define WITH_IRIX_ARRAY 1 @@ -3900,13 +3966,13 @@ #define WITH_IRIX_AUDIT 1 EOF - echo "$as_me:3903: checking for jlimit_startjob" >&5 + echo "$as_me:3969: checking for jlimit_startjob" >&5 echo $ECHO_N "checking for jlimit_startjob... $ECHO_C" >&6 if test "${ac_cv_func_jlimit_startjob+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 3909 "configure" +#line 3975 "configure" #include "confdefs.h" /* System header to define __stub macros and hopefully few prototypes, which can conflict with char jlimit_startjob (); below. */ @@ -3937,16 +4003,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:3940: \"$ac_link\"") >&5 +if { (eval echo "$as_me:4006: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:3943: \$? = $ac_status" >&5 + echo "$as_me:4009: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:3946: \"$ac_try\"") >&5 + { (eval echo "$as_me:4012: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:3949: \$? = $ac_status" >&5 + echo "$as_me:4015: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_func_jlimit_startjob=yes else @@ -3956,7 +4022,7 @@ fi rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:3959: result: $ac_cv_func_jlimit_startjob" >&5 +echo "$as_me:4025: result: $ac_cv_func_jlimit_startjob" >&5 echo "${ECHO_T}$ac_cv_func_jlimit_startjob" >&6 if test $ac_cv_func_jlimit_startjob = yes; then cat >>confdefs.h <<\EOF @@ -4029,7 +4095,9 @@ ;; *-*-netbsd*) check_for_libcrypt_before=1 - need_dash_r=1 + if test "x$withval" != "xno" ; then + need_dash_r=1 + fi ;; *-*-freebsd*) check_for_libcrypt_later=1 @@ -4069,13 +4137,8 @@ #define BROKEN_SAVED_UIDS 1 EOF - CPPFLAGS="$CPPFLAGS -I/usr/local/include" - CFLAGS="$CFLAGS" ;; *-*-solaris*) - CPPFLAGS="$CPPFLAGS -I/usr/local/include" - LDFLAGS="$LDFLAGS -L/usr/local/lib -R/usr/local/lib" - need_dash_r=1 cat >>confdefs.h <<\EOF #define PAM_SUN_CODEBASE 1 EOF @@ -4104,11 +4167,11 @@ external_path_file=/etc/default/login # hardwire lastlog location (can't detect it on some versions) conf_lastlog_location="/var/adm/lastlog" - echo "$as_me:4107: checking for obsolete utmp and wtmp in solaris2.x" >&5 + echo "$as_me:4170: checking for obsolete utmp and wtmp in solaris2.x" >&5 echo $ECHO_N "checking for obsolete utmp and wtmp in solaris2.x... $ECHO_C" >&6 sol2ver=`echo "$host"| sed -e 's/.*[0-9]\.//'` if test "$sol2ver" -ge 8; then - echo "$as_me:4111: result: yes" >&5 + echo "$as_me:4174: result: yes" >&5 echo "${ECHO_T}yes" >&6 cat >>confdefs.h <<\EOF #define DISABLE_UTMP 1 @@ -4119,7 +4182,7 @@ EOF else - echo "$as_me:4122: result: no" >&5 + echo "$as_me:4185: result: no" >&5 echo "${ECHO_T}no" >&6 fi ;; @@ -4129,13 +4192,13 @@ for ac_func in getpwanam do as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh` -echo "$as_me:4132: checking for $ac_func" >&5 +echo "$as_me:4195: checking for $ac_func" >&5 echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6 if eval "test \"\${$as_ac_var+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 4138 "configure" +#line 4201 "configure" #include "confdefs.h" /* System header to define __stub macros and hopefully few prototypes, which can conflict with char $ac_func (); below. */ @@ -4166,16 +4229,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:4169: \"$ac_link\"") >&5 +if { (eval echo "$as_me:4232: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:4172: \$? = $ac_status" >&5 + echo "$as_me:4235: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:4175: \"$ac_try\"") >&5 + { (eval echo "$as_me:4238: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:4178: \$? = $ac_status" >&5 + echo "$as_me:4241: \$? = $ac_status" >&5 (exit $ac_status); }; }; then eval "$as_ac_var=yes" else @@ -4185,7 +4248,7 @@ fi rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:4188: result: `eval echo '${'$as_ac_var'}'`" >&5 +echo "$as_me:4251: result: `eval echo '${'$as_ac_var'}'`" >&5 echo "${ECHO_T}`eval echo '${'$as_ac_var'}'`" >&6 if test `eval echo '${'$as_ac_var'}'` = yes; then cat >>confdefs.h <>confdefs.h <<\EOF #define USE_PIPES 1 @@ -4233,9 +4294,66 @@ ;; *-sni-sysv*) - CPPFLAGS="$CPPFLAGS -I/usr/local/include" # /usr/ucblib MUST NOT be searched on ReliantUNIX - LDFLAGS="$LDFLAGS -L/usr/local/lib" + +echo "$as_me:4299: checking for dlsym in -ldl" >&5 +echo $ECHO_N "checking for dlsym in -ldl... $ECHO_C" >&6 +if test "${ac_cv_lib_dl_dlsym+set}" = set; then + echo $ECHO_N "(cached) $ECHO_C" >&6 +else + ac_check_lib_save_LIBS=$LIBS +LIBS="-ldl $LIBS" +cat >conftest.$ac_ext <<_ACEOF +#line 4307 "configure" +#include "confdefs.h" + +/* Override any gcc2 internal prototype to avoid an error. */ +#ifdef __cplusplus +extern "C" +#endif +/* We use char because int might match the return type of a gcc2 + builtin and then its argument prototype would still apply. */ +char dlsym (); +int +main () +{ +dlsym (); + ; + return 0; +} +_ACEOF +rm -f conftest.$ac_objext conftest$ac_exeext +if { (eval echo "$as_me:4326: \"$ac_link\"") >&5 + (eval $ac_link) 2>&5 + ac_status=$? + echo "$as_me:4329: \$? = $ac_status" >&5 + (exit $ac_status); } && + { ac_try='test -s conftest$ac_exeext' + { (eval echo "$as_me:4332: \"$ac_try\"") >&5 + (eval $ac_try) 2>&5 + ac_status=$? + echo "$as_me:4335: \$? = $ac_status" >&5 + (exit $ac_status); }; }; then + ac_cv_lib_dl_dlsym=yes +else + echo "$as_me: failed program was:" >&5 +cat conftest.$ac_ext >&5 +ac_cv_lib_dl_dlsym=no +fi +rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext +LIBS=$ac_check_lib_save_LIBS +fi +echo "$as_me:4346: result: $ac_cv_lib_dl_dlsym" >&5 +echo "${ECHO_T}$ac_cv_lib_dl_dlsym" >&6 +if test $ac_cv_lib_dl_dlsym = yes; then + cat >>confdefs.h <>confdefs.h <<\EOF #define USE_PIPES 1 @@ -4246,6 +4364,18 @@ EOF cat >>confdefs.h <<\EOF +#define SETEUID_BREAKS_SETUID 1 +EOF + + cat >>confdefs.h <<\EOF +#define BROKEN_SETREUID 1 +EOF + + cat >>confdefs.h <<\EOF +#define BROKEN_SETREGID 1 +EOF + + cat >>confdefs.h <<\EOF #define SSHD_ACQUIRES_CTTY 1 EOF @@ -4255,8 +4385,6 @@ # otherwise you will find lots of "SIOCGPGRP errno 22" on syslog ;; *-*-sysv4.2*) - CPPFLAGS="$CPPFLAGS -I/usr/local/include" - LDFLAGS="$LDFLAGS -L/usr/local/lib" cat >>confdefs.h <<\EOF #define USE_PIPES 1 EOF @@ -4275,8 +4403,6 @@ ;; *-*-sysv5*) - CPPFLAGS="$CPPFLAGS -I/usr/local/include" - LDFLAGS="$LDFLAGS -L/usr/local/lib" cat >>confdefs.h <<\EOF #define USE_PIPES 1 EOF @@ -4295,13 +4421,10 @@ ;; *-*-sysv*) - CPPFLAGS="$CPPFLAGS -I/usr/local/include" - LDFLAGS="$LDFLAGS -L/usr/local/lib" ;; *-*-sco3.2v4*) - CPPFLAGS="$CPPFLAGS -Dftruncate=chsize -I/usr/local/include" - LDFLAGS="$LDFLAGS -L/usr/local/lib" - LIBS="$LIBS -los -lprot -lx -ltinfo -lm" + CPPFLAGS="$CPPFLAGS -Dftruncate=chsize" + LIBS="$LIBS -los -lprot -lcrypt_i -lx -ltinfo -lm" RANLIB=true no_dev_ptmx=1 cat >>confdefs.h <<\EOF @@ -4331,13 +4454,13 @@ for ac_func in getluid setluid do as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh` -echo "$as_me:4334: checking for $ac_func" >&5 +echo "$as_me:4457: checking for $ac_func" >&5 echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6 if eval "test \"\${$as_ac_var+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 4340 "configure" +#line 4463 "configure" #include "confdefs.h" /* System header to define __stub macros and hopefully few prototypes, which can conflict with char $ac_func (); below. */ @@ -4368,16 +4491,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:4371: \"$ac_link\"") >&5 +if { (eval echo "$as_me:4494: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:4374: \$? = $ac_status" >&5 + echo "$as_me:4497: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:4377: \"$ac_try\"") >&5 + { (eval echo "$as_me:4500: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:4380: \$? = $ac_status" >&5 + echo "$as_me:4503: \$? = $ac_status" >&5 (exit $ac_status); }; }; then eval "$as_ac_var=yes" else @@ -4387,7 +4510,7 @@ fi rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:4390: result: `eval echo '${'$as_ac_var'}'`" >&5 +echo "$as_me:4513: result: `eval echo '${'$as_ac_var'}'`" >&5 echo "${ECHO_T}`eval echo '${'$as_ac_var'}'`" >&6 if test `eval echo '${'$as_ac_var'}'` = yes; then cat >>confdefs.h <>confdefs.h <<\EOF @@ -4443,13 +4564,13 @@ for ac_func in getluid setluid do as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh` -echo "$as_me:4446: checking for $ac_func" >&5 +echo "$as_me:4567: checking for $ac_func" >&5 echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6 if eval "test \"\${$as_ac_var+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 4452 "configure" +#line 4573 "configure" #include "confdefs.h" /* System header to define __stub macros and hopefully few prototypes, which can conflict with char $ac_func (); below. */ @@ -4480,16 +4601,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:4483: \"$ac_link\"") >&5 +if { (eval echo "$as_me:4604: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:4486: \$? = $ac_status" >&5 + echo "$as_me:4607: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:4489: \"$ac_try\"") >&5 + { (eval echo "$as_me:4610: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:4492: \$? = $ac_status" >&5 + echo "$as_me:4613: \$? = $ac_status" >&5 (exit $ac_status); }; }; then eval "$as_ac_var=yes" else @@ -4499,7 +4620,7 @@ fi rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:4502: result: `eval echo '${'$as_ac_var'}'`" >&5 +echo "$as_me:4623: result: `eval echo '${'$as_ac_var'}'`" >&5 echo "${ECHO_T}`eval echo '${'$as_ac_var'}'`" >&6 if test `eval echo '${'$as_ac_var'}'` = yes; then cat >>confdefs.h <>confdefs.h <<\EOF +#define NO_SSH_LASTLOG 1 +EOF + + cat >>confdefs.h <<\EOF +#define SETEUID_BREAKS_SETUID 1 +EOF + + cat >>confdefs.h <<\EOF +#define BROKEN_SETREUID 1 +EOF + + cat >>confdefs.h <<\EOF +#define BROKEN_SETREGID 1 +EOF + + cat >>confdefs.h <<\EOF #define USE_PIPES 1 EOF @@ -4526,6 +4663,18 @@ ;; *-*-unicosmp*) cat >>confdefs.h <<\EOF +#define SETEUID_BREAKS_SETUID 1 +EOF + + cat >>confdefs.h <<\EOF +#define BROKEN_SETREUID 1 +EOF + + cat >>confdefs.h <<\EOF +#define BROKEN_SETREGID 1 +EOF + + cat >>confdefs.h <<\EOF #define WITH_ABBREV_NO_TTY 1 EOF @@ -4538,11 +4687,23 @@ EOF LDFLAGS="$LDFLAGS" - LIBS="$LIBS -lgen -lacid" + LIBS="$LIBS -lgen -lacid -ldb" MANTYPE=cat ;; *-*-unicos*) cat >>confdefs.h <<\EOF +#define SETEUID_BREAKS_SETUID 1 +EOF + + cat >>confdefs.h <<\EOF +#define BROKEN_SETREUID 1 +EOF + + cat >>confdefs.h <<\EOF +#define BROKEN_SETREGID 1 +EOF + + cat >>confdefs.h <<\EOF #define USE_PIPES 1 EOF @@ -4559,7 +4720,7 @@ MANTYPE=cat ;; *-dec-osf*) - echo "$as_me:4562: checking for Digital Unix SIA" >&5 + echo "$as_me:4723: checking for Digital Unix SIA" >&5 echo $ECHO_N "checking for Digital Unix SIA... $ECHO_C" >&6 no_osfsia="" @@ -4568,7 +4729,7 @@ withval="$with_osfsia" if test "x$withval" = "xno" ; then - echo "$as_me:4571: result: disabled" >&5 + echo "$as_me:4732: result: disabled" >&5 echo "${ECHO_T}disabled" >&6 no_osfsia=1 fi @@ -4576,7 +4737,7 @@ fi; if test -z "$no_osfsia" ; then if test -f /etc/sia/matrix.conf; then - echo "$as_me:4579: result: yes" >&5 + echo "$as_me:4740: result: yes" >&5 echo "${ECHO_T}yes" >&6 cat >>confdefs.h <<\EOF #define HAVE_OSF_SIA 1 @@ -4592,14 +4753,14 @@ LIBS="$LIBS -lsecurity -ldb -lm -laud" else - echo "$as_me:4595: result: no" >&5 + echo "$as_me:4756: result: no" >&5 echo "${ECHO_T}no" >&6 - fi - fi - cat >>confdefs.h <<\EOF -#define DISABLE_FD_PASSING 1 + cat >>confdefs.h <<\EOF +#define LOCKED_PASSWD_SUBSTR "Nologin" EOF + fi + fi cat >>confdefs.h <<\EOF #define BROKEN_GETADDRINFO 1 EOF @@ -4616,10 +4777,6 @@ #define BROKEN_SETREGID 1 EOF - cat >>confdefs.h <<\EOF -#define LOCKED_PASSWD_SUBSTR "Nologin" -EOF - ;; *-*-nto-qnx) @@ -4688,15 +4845,15 @@ fi; -echo "$as_me:4691: checking compiler and flags for sanity" >&5 +echo "$as_me:4848: checking compiler and flags for sanity" >&5 echo $ECHO_N "checking compiler and flags for sanity... $ECHO_C" >&6 if test "$cross_compiling" = yes; then - { { echo "$as_me:4694: error: cannot run test program while cross compiling" >&5 + { { echo "$as_me:4851: error: cannot run test program while cross compiling" >&5 echo "$as_me: error: cannot run test program while cross compiling" >&2;} { (exit 1); exit 1; }; } else cat >conftest.$ac_ext <<_ACEOF -#line 4699 "configure" +#line 4856 "configure" #include "confdefs.h" #include @@ -4704,26 +4861,26 @@ _ACEOF rm -f conftest$ac_exeext -if { (eval echo "$as_me:4707: \"$ac_link\"") >&5 +if { (eval echo "$as_me:4864: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:4710: \$? = $ac_status" >&5 + echo "$as_me:4867: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='./conftest$ac_exeext' - { (eval echo "$as_me:4712: \"$ac_try\"") >&5 + { (eval echo "$as_me:4869: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:4715: \$? = $ac_status" >&5 + echo "$as_me:4872: \$? = $ac_status" >&5 (exit $ac_status); }; }; then - echo "$as_me:4717: result: yes" >&5 + echo "$as_me:4874: result: yes" >&5 echo "${ECHO_T}yes" >&6 else echo "$as_me: program exited with status $ac_status" >&5 echo "$as_me: failed program was:" >&5 cat conftest.$ac_ext >&5 - echo "$as_me:4724: result: no" >&5 + echo "$as_me:4881: result: no" >&5 echo "${ECHO_T}no" >&6 - { { echo "$as_me:4726: error: *** compiler cannot create working executables, check config.log ***" >&5 + { { echo "$as_me:4883: error: *** compiler cannot create working executables, check config.log ***" >&5 echo "$as_me: error: *** compiler cannot create working executables, check config.log ***" >&2;} { (exit 1); exit 1; }; } @@ -4736,32 +4893,32 @@ for ac_header in bstring.h crypt.h endian.h features.h floatingpoint.h \ getopt.h glob.h ia.h lastlog.h limits.h login.h \ login_cap.h maillock.h netdb.h netgroup.h \ - netinet/in_systm.h paths.h pty.h readpassphrase.h \ + netinet/in_systm.h pam/pam_appl.h paths.h pty.h readpassphrase.h \ rpc/types.h security/pam_appl.h shadow.h stddef.h stdint.h \ strings.h sys/strtio.h sys/audit.h sys/bitypes.h sys/bsdtty.h \ - sys/cdefs.h sys/mman.h sys/pstat.h sys/select.h sys/stat.h \ - sys/stropts.h sys/sysmacros.h sys/time.h sys/timers.h \ + sys/cdefs.h sys/mman.h sys/pstat.h sys/ptms.h sys/select.h sys/stat.h \ + sys/stream.h sys/stropts.h sys/sysmacros.h sys/time.h sys/timers.h \ sys/un.h time.h tmpdir.h ttyent.h usersec.h \ util.h utime.h utmp.h utmpx.h vis.h do as_ac_Header=`echo "ac_cv_header_$ac_header" | $as_tr_sh` -echo "$as_me:4748: checking for $ac_header" >&5 +echo "$as_me:4905: checking for $ac_header" >&5 echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6 if eval "test \"\${$as_ac_Header+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 4754 "configure" +#line 4911 "configure" #include "confdefs.h" #include <$ac_header> _ACEOF -if { (eval echo "$as_me:4758: \"$ac_cpp conftest.$ac_ext\"") >&5 +if { (eval echo "$as_me:4915: \"$ac_cpp conftest.$ac_ext\"") >&5 (eval $ac_cpp conftest.$ac_ext) 2>conftest.er1 ac_status=$? egrep -v '^ *\+' conftest.er1 >conftest.err rm -f conftest.er1 cat conftest.err >&5 - echo "$as_me:4764: \$? = $ac_status" >&5 + echo "$as_me:4921: \$? = $ac_status" >&5 (exit $ac_status); } >/dev/null; then if test -s conftest.err; then ac_cpp_err=$ac_c_preproc_warn_flag @@ -4780,7 +4937,7 @@ fi rm -f conftest.err conftest.$ac_ext fi -echo "$as_me:4783: result: `eval echo '${'$as_ac_Header'}'`" >&5 +echo "$as_me:4940: result: `eval echo '${'$as_ac_Header'}'`" >&5 echo "${ECHO_T}`eval echo '${'$as_ac_Header'}'`" >&6 if test `eval echo '${'$as_ac_Header'}'` = yes; then cat >>confdefs.h <&5 +echo "$as_me:4951: checking for yp_match" >&5 echo $ECHO_N "checking for yp_match... $ECHO_C" >&6 if test "${ac_cv_func_yp_match+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 4800 "configure" +#line 4957 "configure" #include "confdefs.h" /* System header to define __stub macros and hopefully few prototypes, which can conflict with char yp_match (); below. */ @@ -4828,16 +4985,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:4831: \"$ac_link\"") >&5 +if { (eval echo "$as_me:4988: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:4834: \$? = $ac_status" >&5 + echo "$as_me:4991: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:4837: \"$ac_try\"") >&5 + { (eval echo "$as_me:4994: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:4840: \$? = $ac_status" >&5 + echo "$as_me:4997: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_func_yp_match=yes else @@ -4847,13 +5004,13 @@ fi rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:4850: result: $ac_cv_func_yp_match" >&5 +echo "$as_me:5007: result: $ac_cv_func_yp_match" >&5 echo "${ECHO_T}$ac_cv_func_yp_match" >&6 if test $ac_cv_func_yp_match = yes; then : else -echo "$as_me:4856: checking for yp_match in -lnsl" >&5 +echo "$as_me:5013: checking for yp_match in -lnsl" >&5 echo $ECHO_N "checking for yp_match in -lnsl... $ECHO_C" >&6 if test "${ac_cv_lib_nsl_yp_match+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -4861,7 +5018,7 @@ ac_check_lib_save_LIBS=$LIBS LIBS="-lnsl $LIBS" cat >conftest.$ac_ext <<_ACEOF -#line 4864 "configure" +#line 5021 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -4880,16 +5037,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:4883: \"$ac_link\"") >&5 +if { (eval echo "$as_me:5040: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:4886: \$? = $ac_status" >&5 + echo "$as_me:5043: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:4889: \"$ac_try\"") >&5 + { (eval echo "$as_me:5046: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:4892: \$? = $ac_status" >&5 + echo "$as_me:5049: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_lib_nsl_yp_match=yes else @@ -4900,7 +5057,7 @@ rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi -echo "$as_me:4903: result: $ac_cv_lib_nsl_yp_match" >&5 +echo "$as_me:5060: result: $ac_cv_lib_nsl_yp_match" >&5 echo "${ECHO_T}$ac_cv_lib_nsl_yp_match" >&6 if test $ac_cv_lib_nsl_yp_match = yes; then cat >>confdefs.h <&5 +echo "$as_me:5073: checking for setsockopt" >&5 echo $ECHO_N "checking for setsockopt... $ECHO_C" >&6 if test "${ac_cv_func_setsockopt+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 4922 "configure" +#line 5079 "configure" #include "confdefs.h" /* System header to define __stub macros and hopefully few prototypes, which can conflict with char setsockopt (); below. */ @@ -4950,16 +5107,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:4953: \"$ac_link\"") >&5 +if { (eval echo "$as_me:5110: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:4956: \$? = $ac_status" >&5 + echo "$as_me:5113: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:4959: \"$ac_try\"") >&5 + { (eval echo "$as_me:5116: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:4962: \$? = $ac_status" >&5 + echo "$as_me:5119: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_func_setsockopt=yes else @@ -4969,13 +5126,13 @@ fi rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:4972: result: $ac_cv_func_setsockopt" >&5 +echo "$as_me:5129: result: $ac_cv_func_setsockopt" >&5 echo "${ECHO_T}$ac_cv_func_setsockopt" >&6 if test $ac_cv_func_setsockopt = yes; then : else -echo "$as_me:4978: checking for setsockopt in -lsocket" >&5 +echo "$as_me:5135: checking for setsockopt in -lsocket" >&5 echo $ECHO_N "checking for setsockopt in -lsocket... $ECHO_C" >&6 if test "${ac_cv_lib_socket_setsockopt+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -4983,7 +5140,7 @@ ac_check_lib_save_LIBS=$LIBS LIBS="-lsocket $LIBS" cat >conftest.$ac_ext <<_ACEOF -#line 4986 "configure" +#line 5143 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -5002,16 +5159,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:5005: \"$ac_link\"") >&5 +if { (eval echo "$as_me:5162: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:5008: \$? = $ac_status" >&5 + echo "$as_me:5165: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:5011: \"$ac_try\"") >&5 + { (eval echo "$as_me:5168: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:5014: \$? = $ac_status" >&5 + echo "$as_me:5171: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_lib_socket_setsockopt=yes else @@ -5022,7 +5179,7 @@ rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi -echo "$as_me:5025: result: $ac_cv_lib_socket_setsockopt" >&5 +echo "$as_me:5182: result: $ac_cv_lib_socket_setsockopt" >&5 echo "${ECHO_T}$ac_cv_lib_socket_setsockopt" >&6 if test $ac_cv_lib_socket_setsockopt = yes; then cat >>confdefs.h <&5 + echo "$as_me:5197: checking for innetgr in -lrpc" >&5 echo $ECHO_N "checking for innetgr in -lrpc... $ECHO_C" >&6 if test "${ac_cv_lib_rpc_innetgr+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -5045,7 +5202,7 @@ ac_check_lib_save_LIBS=$LIBS LIBS="-lrpc -lyp -lrpc $LIBS" cat >conftest.$ac_ext <<_ACEOF -#line 5048 "configure" +#line 5205 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -5064,16 +5221,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:5067: \"$ac_link\"") >&5 +if { (eval echo "$as_me:5224: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:5070: \$? = $ac_status" >&5 + echo "$as_me:5227: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:5073: \"$ac_try\"") >&5 + { (eval echo "$as_me:5230: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:5076: \$? = $ac_status" >&5 + echo "$as_me:5233: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_lib_rpc_innetgr=yes else @@ -5084,7 +5241,7 @@ rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi -echo "$as_me:5087: result: $ac_cv_lib_rpc_innetgr" >&5 +echo "$as_me:5244: result: $ac_cv_lib_rpc_innetgr" >&5 echo "${ECHO_T}$ac_cv_lib_rpc_innetgr" >&6 if test $ac_cv_lib_rpc_innetgr = yes; then LIBS="-lrpc -lyp -lrpc $LIBS" @@ -5096,13 +5253,13 @@ for ac_func in dirname do as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh` -echo "$as_me:5099: checking for $ac_func" >&5 +echo "$as_me:5256: checking for $ac_func" >&5 echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6 if eval "test \"\${$as_ac_var+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 5105 "configure" +#line 5262 "configure" #include "confdefs.h" /* System header to define __stub macros and hopefully few prototypes, which can conflict with char $ac_func (); below. */ @@ -5133,16 +5290,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:5136: \"$ac_link\"") >&5 +if { (eval echo "$as_me:5293: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:5139: \$? = $ac_status" >&5 + echo "$as_me:5296: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:5142: \"$ac_try\"") >&5 + { (eval echo "$as_me:5299: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:5145: \$? = $ac_status" >&5 + echo "$as_me:5302: \$? = $ac_status" >&5 (exit $ac_status); }; }; then eval "$as_ac_var=yes" else @@ -5152,7 +5309,7 @@ fi rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:5155: result: `eval echo '${'$as_ac_var'}'`" >&5 +echo "$as_me:5312: result: `eval echo '${'$as_ac_var'}'`" >&5 echo "${ECHO_T}`eval echo '${'$as_ac_var'}'`" >&6 if test `eval echo '${'$as_ac_var'}'` = yes; then cat >>confdefs.h <&5 +echo "$as_me:5322: checking for $ac_header" >&5 echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6 if eval "test \"\${$as_ac_Header+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 5171 "configure" +#line 5328 "configure" #include "confdefs.h" #include <$ac_header> _ACEOF -if { (eval echo "$as_me:5175: \"$ac_cpp conftest.$ac_ext\"") >&5 +if { (eval echo "$as_me:5332: \"$ac_cpp conftest.$ac_ext\"") >&5 (eval $ac_cpp conftest.$ac_ext) 2>conftest.er1 ac_status=$? egrep -v '^ *\+' conftest.er1 >conftest.err rm -f conftest.er1 cat conftest.err >&5 - echo "$as_me:5181: \$? = $ac_status" >&5 + echo "$as_me:5338: \$? = $ac_status" >&5 (exit $ac_status); } >/dev/null; then if test -s conftest.err; then ac_cpp_err=$ac_c_preproc_warn_flag @@ -5197,7 +5354,7 @@ fi rm -f conftest.err conftest.$ac_ext fi -echo "$as_me:5200: result: `eval echo '${'$as_ac_Header'}'`" >&5 +echo "$as_me:5357: result: `eval echo '${'$as_ac_Header'}'`" >&5 echo "${ECHO_T}`eval echo '${'$as_ac_Header'}'`" >&6 if test `eval echo '${'$as_ac_Header'}'` = yes; then cat >>confdefs.h <&5 + echo "$as_me:5369: checking for dirname in -lgen" >&5 echo $ECHO_N "checking for dirname in -lgen... $ECHO_C" >&6 if test "${ac_cv_lib_gen_dirname+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -5217,7 +5374,7 @@ ac_check_lib_save_LIBS=$LIBS LIBS="-lgen $LIBS" cat >conftest.$ac_ext <<_ACEOF -#line 5220 "configure" +#line 5377 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -5236,16 +5393,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:5239: \"$ac_link\"") >&5 +if { (eval echo "$as_me:5396: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:5242: \$? = $ac_status" >&5 + echo "$as_me:5399: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:5245: \"$ac_try\"") >&5 + { (eval echo "$as_me:5402: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:5248: \$? = $ac_status" >&5 + echo "$as_me:5405: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_lib_gen_dirname=yes else @@ -5256,11 +5413,11 @@ rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi -echo "$as_me:5259: result: $ac_cv_lib_gen_dirname" >&5 +echo "$as_me:5416: result: $ac_cv_lib_gen_dirname" >&5 echo "${ECHO_T}$ac_cv_lib_gen_dirname" >&6 if test $ac_cv_lib_gen_dirname = yes; then - echo "$as_me:5263: checking for broken dirname" >&5 + echo "$as_me:5420: checking for broken dirname" >&5 echo $ECHO_N "checking for broken dirname... $ECHO_C" >&6 if test "${ac_cv_have_broken_dirname+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -5269,12 +5426,12 @@ save_LIBS="$LIBS" LIBS="$LIBS -lgen" if test "$cross_compiling" = yes; then - { { echo "$as_me:5272: error: cannot run test program while cross compiling" >&5 + { { echo "$as_me:5429: error: cannot run test program while cross compiling" >&5 echo "$as_me: error: cannot run test program while cross compiling" >&2;} { (exit 1); exit 1; }; } else cat >conftest.$ac_ext <<_ACEOF -#line 5277 "configure" +#line 5434 "configure" #include "confdefs.h" #include @@ -5294,15 +5451,15 @@ _ACEOF rm -f conftest$ac_exeext -if { (eval echo "$as_me:5297: \"$ac_link\"") >&5 +if { (eval echo "$as_me:5454: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:5300: \$? = $ac_status" >&5 + echo "$as_me:5457: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='./conftest$ac_exeext' - { (eval echo "$as_me:5302: \"$ac_try\"") >&5 + { (eval echo "$as_me:5459: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:5305: \$? = $ac_status" >&5 + echo "$as_me:5462: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_have_broken_dirname="no" else @@ -5317,7 +5474,7 @@ LIBS="$save_LIBS" fi -echo "$as_me:5320: result: $ac_cv_have_broken_dirname" >&5 +echo "$as_me:5477: result: $ac_cv_have_broken_dirname" >&5 echo "${ECHO_T}$ac_cv_have_broken_dirname" >&6 if test "x$ac_cv_have_broken_dirname" = "xno" ; then LIBS="$LIBS -lgen" @@ -5328,23 +5485,23 @@ for ac_header in libgen.h do as_ac_Header=`echo "ac_cv_header_$ac_header" | $as_tr_sh` -echo "$as_me:5331: checking for $ac_header" >&5 +echo "$as_me:5488: checking for $ac_header" >&5 echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6 if eval "test \"\${$as_ac_Header+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 5337 "configure" +#line 5494 "configure" #include "confdefs.h" #include <$ac_header> _ACEOF -if { (eval echo "$as_me:5341: \"$ac_cpp conftest.$ac_ext\"") >&5 +if { (eval echo "$as_me:5498: \"$ac_cpp conftest.$ac_ext\"") >&5 (eval $ac_cpp conftest.$ac_ext) 2>conftest.er1 ac_status=$? egrep -v '^ *\+' conftest.er1 >conftest.err rm -f conftest.er1 cat conftest.err >&5 - echo "$as_me:5347: \$? = $ac_status" >&5 + echo "$as_me:5504: \$? = $ac_status" >&5 (exit $ac_status); } >/dev/null; then if test -s conftest.err; then ac_cpp_err=$ac_c_preproc_warn_flag @@ -5363,7 +5520,7 @@ fi rm -f conftest.err conftest.$ac_ext fi -echo "$as_me:5366: result: `eval echo '${'$as_ac_Header'}'`" >&5 +echo "$as_me:5523: result: `eval echo '${'$as_ac_Header'}'`" >&5 echo "${ECHO_T}`eval echo '${'$as_ac_Header'}'`" >&6 if test `eval echo '${'$as_ac_Header'}'` = yes; then cat >>confdefs.h <&5 +echo "$as_me:5540: checking for getspnam" >&5 echo $ECHO_N "checking for getspnam... $ECHO_C" >&6 if test "${ac_cv_func_getspnam+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 5389 "configure" +#line 5546 "configure" #include "confdefs.h" /* System header to define __stub macros and hopefully few prototypes, which can conflict with char getspnam (); below. */ @@ -5417,16 +5574,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:5420: \"$ac_link\"") >&5 +if { (eval echo "$as_me:5577: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:5423: \$? = $ac_status" >&5 + echo "$as_me:5580: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:5426: \"$ac_try\"") >&5 + { (eval echo "$as_me:5583: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:5429: \$? = $ac_status" >&5 + echo "$as_me:5586: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_func_getspnam=yes else @@ -5436,12 +5593,12 @@ fi rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:5439: result: $ac_cv_func_getspnam" >&5 +echo "$as_me:5596: result: $ac_cv_func_getspnam" >&5 echo "${ECHO_T}$ac_cv_func_getspnam" >&6 if test $ac_cv_func_getspnam = yes; then : else - echo "$as_me:5444: checking for getspnam in -lgen" >&5 + echo "$as_me:5601: checking for getspnam in -lgen" >&5 echo $ECHO_N "checking for getspnam in -lgen... $ECHO_C" >&6 if test "${ac_cv_lib_gen_getspnam+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -5449,7 +5606,7 @@ ac_check_lib_save_LIBS=$LIBS LIBS="-lgen $LIBS" cat >conftest.$ac_ext <<_ACEOF -#line 5452 "configure" +#line 5609 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -5468,16 +5625,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:5471: \"$ac_link\"") >&5 +if { (eval echo "$as_me:5628: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:5474: \$? = $ac_status" >&5 + echo "$as_me:5631: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:5477: \"$ac_try\"") >&5 + { (eval echo "$as_me:5634: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:5480: \$? = $ac_status" >&5 + echo "$as_me:5637: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_lib_gen_getspnam=yes else @@ -5488,7 +5645,7 @@ rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi -echo "$as_me:5491: result: $ac_cv_lib_gen_getspnam" >&5 +echo "$as_me:5648: result: $ac_cv_lib_gen_getspnam" >&5 echo "${ECHO_T}$ac_cv_lib_gen_getspnam" >&6 if test $ac_cv_lib_gen_getspnam = yes; then LIBS="$LIBS -lgen" @@ -5496,7 +5653,7 @@ fi -echo "$as_me:5499: checking for library containing basename" >&5 +echo "$as_me:5656: checking for library containing basename" >&5 echo $ECHO_N "checking for library containing basename... $ECHO_C" >&6 if test "${ac_cv_search_basename+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -5504,7 +5661,7 @@ ac_func_search_save_LIBS=$LIBS ac_cv_search_basename=no cat >conftest.$ac_ext <<_ACEOF -#line 5507 "configure" +#line 5664 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -5523,16 +5680,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:5526: \"$ac_link\"") >&5 +if { (eval echo "$as_me:5683: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:5529: \$? = $ac_status" >&5 + echo "$as_me:5686: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:5532: \"$ac_try\"") >&5 + { (eval echo "$as_me:5689: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:5535: \$? = $ac_status" >&5 + echo "$as_me:5692: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_search_basename="none required" else @@ -5544,7 +5701,7 @@ for ac_lib in gen; do LIBS="-l$ac_lib $ac_func_search_save_LIBS" cat >conftest.$ac_ext <<_ACEOF -#line 5547 "configure" +#line 5704 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -5563,16 +5720,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:5566: \"$ac_link\"") >&5 +if { (eval echo "$as_me:5723: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:5569: \$? = $ac_status" >&5 + echo "$as_me:5726: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:5572: \"$ac_try\"") >&5 + { (eval echo "$as_me:5729: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:5575: \$? = $ac_status" >&5 + echo "$as_me:5732: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_search_basename="-l$ac_lib" break @@ -5585,7 +5742,7 @@ fi LIBS=$ac_func_search_save_LIBS fi -echo "$as_me:5588: result: $ac_cv_search_basename" >&5 +echo "$as_me:5745: result: $ac_cv_search_basename" >&5 echo "${ECHO_T}$ac_cv_search_basename" >&6 if test "$ac_cv_search_basename" != no; then test "$ac_cv_search_basename" = "none required" || LIBS="$ac_cv_search_basename $LIBS" @@ -5595,25 +5752,12 @@ fi -# Check whether --with-rpath or --without-rpath was given. -if test "${with_rpath+set}" = set; then - withval="$with_rpath" - - if test "x$withval" = "xno" ; then - need_dash_r="" - fi - if test "x$withval" = "xyes" ; then - need_dash_r=1 - fi - -fi; - # Check whether --with-zlib or --without-zlib was given. if test "${with_zlib+set}" = set; then withval="$with_zlib" if test "x$withval" = "xno" ; then - { { echo "$as_me:5616: error: *** zlib is required ***" >&5 + { { echo "$as_me:5760: error: *** zlib is required ***" >&5 echo "$as_me: error: *** zlib is required ***" >&2;} { (exit 1); exit 1; }; } fi @@ -5638,7 +5782,7 @@ fi; -echo "$as_me:5641: checking for deflate in -lz" >&5 +echo "$as_me:5785: checking for deflate in -lz" >&5 echo $ECHO_N "checking for deflate in -lz... $ECHO_C" >&6 if test "${ac_cv_lib_z_deflate+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -5646,7 +5790,7 @@ ac_check_lib_save_LIBS=$LIBS LIBS="-lz $LIBS" cat >conftest.$ac_ext <<_ACEOF -#line 5649 "configure" +#line 5793 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -5665,16 +5809,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:5668: \"$ac_link\"") >&5 +if { (eval echo "$as_me:5812: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:5671: \$? = $ac_status" >&5 + echo "$as_me:5815: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:5674: \"$ac_try\"") >&5 + { (eval echo "$as_me:5818: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:5677: \$? = $ac_status" >&5 + echo "$as_me:5821: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_lib_z_deflate=yes else @@ -5685,7 +5829,7 @@ rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi -echo "$as_me:5688: result: $ac_cv_lib_z_deflate" >&5 +echo "$as_me:5832: result: $ac_cv_lib_z_deflate" >&5 echo "${ECHO_T}$ac_cv_lib_z_deflate" >&6 if test $ac_cv_lib_z_deflate = yes; then cat >>confdefs.h <&5 -echo "$as_me: error: *** zlib missing - please install first or check config.log ***" >&2;} - { (exit 1); exit 1; }; } -fi -echo "$as_me:5703: checking for strcasecmp" >&5 -echo $ECHO_N "checking for strcasecmp... $ECHO_C" >&6 -if test "${ac_cv_func_strcasecmp+set}" = set; then - echo $ECHO_N "(cached) $ECHO_C" >&6 -else - cat >conftest.$ac_ext <<_ACEOF -#line 5709 "configure" + saved_CPPFLAGS="$CPPFLAGS" + saved_LDFLAGS="$LDFLAGS" + save_LIBS="$LIBS" + if test -n "${need_dash_r}"; then + LDFLAGS="-L/usr/local/lib -R/usr/local/lib ${saved_LDFLAGS}" + else + LDFLAGS="-L/usr/local/lib ${saved_LDFLAGS}" + fi + CPPFLAGS="-I/usr/local/include ${saved_CPPFLAGS}" + LIBS="$LIBS -lz" + cat >conftest.$ac_ext <<_ACEOF +#line 5854 "configure" #include "confdefs.h" -/* System header to define __stub macros and hopefully few prototypes, - which can conflict with char strcasecmp (); below. */ -#include + /* Override any gcc2 internal prototype to avoid an error. */ #ifdef __cplusplus extern "C" #endif /* We use char because int might match the return type of a gcc2 builtin and then its argument prototype would still apply. */ -char strcasecmp (); -char (*f) (); - +char deflate (); int main () { -/* The GNU C library defines this for functions which it implements - to always fail with ENOSYS. Some functions are actually named - something starting with __ and the normal name is an alias. */ -#if defined (__stub_strcasecmp) || defined (__stub___strcasecmp) -choke me -#else -f = strcasecmp; -#endif - +deflate (); ; return 0; } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:5740: \"$ac_link\"") >&5 +if { (eval echo "$as_me:5873: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:5743: \$? = $ac_status" >&5 + echo "$as_me:5876: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:5746: \"$ac_try\"") >&5 + { (eval echo "$as_me:5879: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:5749: \$? = $ac_status" >&5 + echo "$as_me:5882: \$? = $ac_status" >&5 (exit $ac_status); }; }; then - ac_cv_func_strcasecmp=yes + cat >>confdefs.h <<\EOF +#define HAVE_LIBZ 1 +EOF + +else + echo "$as_me: failed program was:" >&5 +cat conftest.$ac_ext >&5 + + { { echo "$as_me:5892: error: *** zlib missing - please install first or check config.log ***" >&5 +echo "$as_me: error: *** zlib missing - please install first or check config.log ***" >&2;} + { (exit 1); exit 1; }; } + +fi +rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext + +fi + +echo "$as_me:5901: checking for zlib.h" >&5 +echo $ECHO_N "checking for zlib.h... $ECHO_C" >&6 +if test "${ac_cv_header_zlib_h+set}" = set; then + echo $ECHO_N "(cached) $ECHO_C" >&6 +else + cat >conftest.$ac_ext <<_ACEOF +#line 5907 "configure" +#include "confdefs.h" +#include +_ACEOF +if { (eval echo "$as_me:5911: \"$ac_cpp conftest.$ac_ext\"") >&5 + (eval $ac_cpp conftest.$ac_ext) 2>conftest.er1 + ac_status=$? + egrep -v '^ *\+' conftest.er1 >conftest.err + rm -f conftest.er1 + cat conftest.err >&5 + echo "$as_me:5917: \$? = $ac_status" >&5 + (exit $ac_status); } >/dev/null; then + if test -s conftest.err; then + ac_cpp_err=$ac_c_preproc_warn_flag + else + ac_cpp_err= + fi +else + ac_cpp_err=yes +fi +if test -z "$ac_cpp_err"; then + ac_cv_header_zlib_h=yes +else + echo "$as_me: failed program was:" >&5 + cat conftest.$ac_ext >&5 + ac_cv_header_zlib_h=no +fi +rm -f conftest.err conftest.$ac_ext +fi +echo "$as_me:5936: result: $ac_cv_header_zlib_h" >&5 +echo "${ECHO_T}$ac_cv_header_zlib_h" >&6 +if test $ac_cv_header_zlib_h = yes; then + : +else + { { echo "$as_me:5941: error: *** zlib.h missing - please install first or check config.log ***" >&5 +echo "$as_me: error: *** zlib.h missing - please install first or check config.log ***" >&2;} + { (exit 1); exit 1; }; } +fi + +# Check whether --with-zlib-version-check or --without-zlib-version-check was given. +if test "${with_zlib_version_check+set}" = set; then + withval="$with_zlib_version_check" + if test "x$withval" = "xno" ; then + zlib_check_nonfatal=1 + fi + +fi; + +echo "$as_me:5955: checking for zlib 1.1.4 or greater" >&5 +echo $ECHO_N "checking for zlib 1.1.4 or greater... $ECHO_C" >&6 +if test "$cross_compiling" = yes; then + { { echo "$as_me:5958: error: cannot run test program while cross compiling" >&5 +echo "$as_me: error: cannot run test program while cross compiling" >&2;} + { (exit 1); exit 1; }; } +else + cat >conftest.$ac_ext <<_ACEOF +#line 5963 "configure" +#include "confdefs.h" + +#include +int main() +{ + int a, b, c, v; + if (sscanf(ZLIB_VERSION, "%d.%d.%d", &a, &b, &c) != 3) + exit(1); + v = a*1000000 + b*1000 + c; + if (v >= 1001004) + exit(0); + exit(2); +} + +_ACEOF +rm -f conftest$ac_exeext +if { (eval echo "$as_me:5980: \"$ac_link\"") >&5 + (eval $ac_link) 2>&5 + ac_status=$? + echo "$as_me:5983: \$? = $ac_status" >&5 + (exit $ac_status); } && { ac_try='./conftest$ac_exeext' + { (eval echo "$as_me:5985: \"$ac_try\"") >&5 + (eval $ac_try) 2>&5 + ac_status=$? + echo "$as_me:5988: \$? = $ac_status" >&5 + (exit $ac_status); }; }; then + echo "$as_me:5990: result: yes" >&5 +echo "${ECHO_T}yes" >&6 +else + echo "$as_me: program exited with status $ac_status" >&5 +echo "$as_me: failed program was:" >&5 +cat conftest.$ac_ext >&5 + echo "$as_me:5996: result: no" >&5 +echo "${ECHO_T}no" >&6 + if test -z "$zlib_check_nonfatal" ; then + { { echo "$as_me:5999: error: *** zlib too old - check config.log *** +Your reported zlib version has known security problems. It's possible your +vendor has fixed these problems without changing the version number. If you +are sure this is the case, you can disable the check by running +\"./configure --without-zlib-version-check\". +If you are in doubt, upgrade zlib to version 1.1.4 or greater." >&5 +echo "$as_me: error: *** zlib too old - check config.log *** +Your reported zlib version has known security problems. It's possible your +vendor has fixed these problems without changing the version number. If you +are sure this is the case, you can disable the check by running +\"./configure --without-zlib-version-check\". +If you are in doubt, upgrade zlib to version 1.1.4 or greater." >&2;} + { (exit 1); exit 1; }; } + else + { echo "$as_me:6013: WARNING: zlib version may have security problems" >&5 +echo "$as_me: WARNING: zlib version may have security problems" >&2;} + fi + +fi +rm -f core core.* *.core conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext +fi + +echo "$as_me:6021: checking for strcasecmp" >&5 +echo $ECHO_N "checking for strcasecmp... $ECHO_C" >&6 +if test "${ac_cv_func_strcasecmp+set}" = set; then + echo $ECHO_N "(cached) $ECHO_C" >&6 +else + cat >conftest.$ac_ext <<_ACEOF +#line 6027 "configure" +#include "confdefs.h" +/* System header to define __stub macros and hopefully few prototypes, + which can conflict with char strcasecmp (); below. */ +#include +/* Override any gcc2 internal prototype to avoid an error. */ +#ifdef __cplusplus +extern "C" +#endif +/* We use char because int might match the return type of a gcc2 + builtin and then its argument prototype would still apply. */ +char strcasecmp (); +char (*f) (); + +int +main () +{ +/* The GNU C library defines this for functions which it implements + to always fail with ENOSYS. Some functions are actually named + something starting with __ and the normal name is an alias. */ +#if defined (__stub_strcasecmp) || defined (__stub___strcasecmp) +choke me +#else +f = strcasecmp; +#endif + + ; + return 0; +} +_ACEOF +rm -f conftest.$ac_objext conftest$ac_exeext +if { (eval echo "$as_me:6058: \"$ac_link\"") >&5 + (eval $ac_link) 2>&5 + ac_status=$? + echo "$as_me:6061: \$? = $ac_status" >&5 + (exit $ac_status); } && + { ac_try='test -s conftest$ac_exeext' + { (eval echo "$as_me:6064: \"$ac_try\"") >&5 + (eval $ac_try) 2>&5 + ac_status=$? + echo "$as_me:6067: \$? = $ac_status" >&5 + (exit $ac_status); }; }; then + ac_cv_func_strcasecmp=yes else echo "$as_me: failed program was:" >&5 cat conftest.$ac_ext >&5 @@ -5756,12 +6074,12 @@ fi rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:5759: result: $ac_cv_func_strcasecmp" >&5 +echo "$as_me:6077: result: $ac_cv_func_strcasecmp" >&5 echo "${ECHO_T}$ac_cv_func_strcasecmp" >&6 if test $ac_cv_func_strcasecmp = yes; then : else - echo "$as_me:5764: checking for strcasecmp in -lresolv" >&5 + echo "$as_me:6082: checking for strcasecmp in -lresolv" >&5 echo $ECHO_N "checking for strcasecmp in -lresolv... $ECHO_C" >&6 if test "${ac_cv_lib_resolv_strcasecmp+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -5769,7 +6087,7 @@ ac_check_lib_save_LIBS=$LIBS LIBS="-lresolv $LIBS" cat >conftest.$ac_ext <<_ACEOF -#line 5772 "configure" +#line 6090 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -5788,16 +6106,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:5791: \"$ac_link\"") >&5 +if { (eval echo "$as_me:6109: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:5794: \$? = $ac_status" >&5 + echo "$as_me:6112: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:5797: \"$ac_try\"") >&5 + { (eval echo "$as_me:6115: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:5800: \$? = $ac_status" >&5 + echo "$as_me:6118: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_lib_resolv_strcasecmp=yes else @@ -5808,7 +6126,7 @@ rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi -echo "$as_me:5811: result: $ac_cv_lib_resolv_strcasecmp" >&5 +echo "$as_me:6129: result: $ac_cv_lib_resolv_strcasecmp" >&5 echo "${ECHO_T}$ac_cv_lib_resolv_strcasecmp" >&6 if test $ac_cv_lib_resolv_strcasecmp = yes; then LIBS="$LIBS -lresolv" @@ -5816,13 +6134,13 @@ fi -echo "$as_me:5819: checking for utimes" >&5 +echo "$as_me:6137: checking for utimes" >&5 echo $ECHO_N "checking for utimes... $ECHO_C" >&6 if test "${ac_cv_func_utimes+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 5825 "configure" +#line 6143 "configure" #include "confdefs.h" /* System header to define __stub macros and hopefully few prototypes, which can conflict with char utimes (); below. */ @@ -5853,16 +6171,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:5856: \"$ac_link\"") >&5 +if { (eval echo "$as_me:6174: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:5859: \$? = $ac_status" >&5 + echo "$as_me:6177: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:5862: \"$ac_try\"") >&5 + { (eval echo "$as_me:6180: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:5865: \$? = $ac_status" >&5 + echo "$as_me:6183: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_func_utimes=yes else @@ -5872,12 +6190,12 @@ fi rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:5875: result: $ac_cv_func_utimes" >&5 +echo "$as_me:6193: result: $ac_cv_func_utimes" >&5 echo "${ECHO_T}$ac_cv_func_utimes" >&6 if test $ac_cv_func_utimes = yes; then : else - echo "$as_me:5880: checking for utimes in -lc89" >&5 + echo "$as_me:6198: checking for utimes in -lc89" >&5 echo $ECHO_N "checking for utimes in -lc89... $ECHO_C" >&6 if test "${ac_cv_lib_c89_utimes+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -5885,7 +6203,7 @@ ac_check_lib_save_LIBS=$LIBS LIBS="-lc89 $LIBS" cat >conftest.$ac_ext <<_ACEOF -#line 5888 "configure" +#line 6206 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -5904,16 +6222,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:5907: \"$ac_link\"") >&5 +if { (eval echo "$as_me:6225: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:5910: \$? = $ac_status" >&5 + echo "$as_me:6228: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:5913: \"$ac_try\"") >&5 + { (eval echo "$as_me:6231: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:5916: \$? = $ac_status" >&5 + echo "$as_me:6234: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_lib_c89_utimes=yes else @@ -5924,7 +6242,7 @@ rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi -echo "$as_me:5927: result: $ac_cv_lib_c89_utimes" >&5 +echo "$as_me:6245: result: $ac_cv_lib_c89_utimes" >&5 echo "${ECHO_T}$ac_cv_lib_c89_utimes" >&6 if test $ac_cv_lib_c89_utimes = yes; then cat >>confdefs.h <<\EOF @@ -5939,23 +6257,23 @@ for ac_header in libutil.h do as_ac_Header=`echo "ac_cv_header_$ac_header" | $as_tr_sh` -echo "$as_me:5942: checking for $ac_header" >&5 +echo "$as_me:6260: checking for $ac_header" >&5 echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6 if eval "test \"\${$as_ac_Header+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 5948 "configure" +#line 6266 "configure" #include "confdefs.h" #include <$ac_header> _ACEOF -if { (eval echo "$as_me:5952: \"$ac_cpp conftest.$ac_ext\"") >&5 +if { (eval echo "$as_me:6270: \"$ac_cpp conftest.$ac_ext\"") >&5 (eval $ac_cpp conftest.$ac_ext) 2>conftest.er1 ac_status=$? egrep -v '^ *\+' conftest.er1 >conftest.err rm -f conftest.er1 cat conftest.err >&5 - echo "$as_me:5958: \$? = $ac_status" >&5 + echo "$as_me:6276: \$? = $ac_status" >&5 (exit $ac_status); } >/dev/null; then if test -s conftest.err; then ac_cpp_err=$ac_c_preproc_warn_flag @@ -5974,7 +6292,7 @@ fi rm -f conftest.err conftest.$ac_ext fi -echo "$as_me:5977: result: `eval echo '${'$as_ac_Header'}'`" >&5 +echo "$as_me:6295: result: `eval echo '${'$as_ac_Header'}'`" >&5 echo "${ECHO_T}`eval echo '${'$as_ac_Header'}'`" >&6 if test `eval echo '${'$as_ac_Header'}'` = yes; then cat >>confdefs.h <&5 +echo "$as_me:6305: checking for library containing login" >&5 echo $ECHO_N "checking for library containing login... $ECHO_C" >&6 if test "${ac_cv_search_login+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -5992,7 +6310,7 @@ ac_func_search_save_LIBS=$LIBS ac_cv_search_login=no cat >conftest.$ac_ext <<_ACEOF -#line 5995 "configure" +#line 6313 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -6011,16 +6329,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:6014: \"$ac_link\"") >&5 +if { (eval echo "$as_me:6332: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:6017: \$? = $ac_status" >&5 + echo "$as_me:6335: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:6020: \"$ac_try\"") >&5 + { (eval echo "$as_me:6338: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:6023: \$? = $ac_status" >&5 + echo "$as_me:6341: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_search_login="none required" else @@ -6032,7 +6350,7 @@ for ac_lib in util bsd; do LIBS="-l$ac_lib $ac_func_search_save_LIBS" cat >conftest.$ac_ext <<_ACEOF -#line 6035 "configure" +#line 6353 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -6051,16 +6369,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:6054: \"$ac_link\"") >&5 +if { (eval echo "$as_me:6372: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:6057: \$? = $ac_status" >&5 + echo "$as_me:6375: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:6060: \"$ac_try\"") >&5 + { (eval echo "$as_me:6378: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:6063: \$? = $ac_status" >&5 + echo "$as_me:6381: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_search_login="-l$ac_lib" break @@ -6073,7 +6391,7 @@ fi LIBS=$ac_func_search_save_LIBS fi -echo "$as_me:6076: result: $ac_cv_search_login" >&5 +echo "$as_me:6394: result: $ac_cv_search_login" >&5 echo "${ECHO_T}$ac_cv_search_login" >&6 if test "$ac_cv_search_login" != no; then test "$ac_cv_search_login" = "none required" || LIBS="$ac_cv_search_login $LIBS" @@ -6086,13 +6404,13 @@ for ac_func in logout updwtmp logwtmp do as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh` -echo "$as_me:6089: checking for $ac_func" >&5 +echo "$as_me:6407: checking for $ac_func" >&5 echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6 if eval "test \"\${$as_ac_var+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 6095 "configure" +#line 6413 "configure" #include "confdefs.h" /* System header to define __stub macros and hopefully few prototypes, which can conflict with char $ac_func (); below. */ @@ -6123,16 +6441,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:6126: \"$ac_link\"") >&5 +if { (eval echo "$as_me:6444: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:6129: \$? = $ac_status" >&5 + echo "$as_me:6447: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:6132: \"$ac_try\"") >&5 + { (eval echo "$as_me:6450: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:6135: \$? = $ac_status" >&5 + echo "$as_me:6453: \$? = $ac_status" >&5 (exit $ac_status); }; }; then eval "$as_ac_var=yes" else @@ -6142,7 +6460,7 @@ fi rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:6145: result: `eval echo '${'$as_ac_var'}'`" >&5 +echo "$as_me:6463: result: `eval echo '${'$as_ac_var'}'`" >&5 echo "${ECHO_T}`eval echo '${'$as_ac_var'}'`" >&6 if test `eval echo '${'$as_ac_var'}'` = yes; then cat >>confdefs.h <&5 +echo "$as_me:6476: checking for $ac_func" >&5 echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6 if eval "test \"\${$as_ac_var+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 6164 "configure" +#line 6482 "configure" #include "confdefs.h" /* System header to define __stub macros and hopefully few prototypes, which can conflict with char $ac_func (); below. */ @@ -6192,16 +6510,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:6195: \"$ac_link\"") >&5 +if { (eval echo "$as_me:6513: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:6198: \$? = $ac_status" >&5 + echo "$as_me:6516: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:6201: \"$ac_try\"") >&5 + { (eval echo "$as_me:6519: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:6204: \$? = $ac_status" >&5 + echo "$as_me:6522: \$? = $ac_status" >&5 (exit $ac_status); }; }; then eval "$as_ac_var=yes" else @@ -6211,7 +6529,7 @@ fi rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:6214: result: `eval echo '${'$as_ac_var'}'`" >&5 +echo "$as_me:6532: result: `eval echo '${'$as_ac_var'}'`" >&5 echo "${ECHO_T}`eval echo '${'$as_ac_var'}'`" >&6 if test `eval echo '${'$as_ac_var'}'` = yes; then cat >>confdefs.h <&5 +echo "$as_me:6541: checking for strftime in -lintl" >&5 echo $ECHO_N "checking for strftime in -lintl... $ECHO_C" >&6 if test "${ac_cv_lib_intl_strftime+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -6228,7 +6546,7 @@ ac_check_lib_save_LIBS=$LIBS LIBS="-lintl $LIBS" cat >conftest.$ac_ext <<_ACEOF -#line 6231 "configure" +#line 6549 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -6247,16 +6565,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:6250: \"$ac_link\"") >&5 +if { (eval echo "$as_me:6568: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:6253: \$? = $ac_status" >&5 + echo "$as_me:6571: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:6256: \"$ac_try\"") >&5 + { (eval echo "$as_me:6574: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:6259: \$? = $ac_status" >&5 + echo "$as_me:6577: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_lib_intl_strftime=yes else @@ -6267,7 +6585,7 @@ rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi -echo "$as_me:6270: result: $ac_cv_lib_intl_strftime" >&5 +echo "$as_me:6588: result: $ac_cv_lib_intl_strftime" >&5 echo "${ECHO_T}$ac_cv_lib_intl_strftime" >&6 if test $ac_cv_lib_intl_strftime = yes; then cat >>confdefs.h <<\EOF @@ -6281,10 +6599,10 @@ done # Check for ALTDIRFUNC glob() extension -echo "$as_me:6284: checking for GLOB_ALTDIRFUNC support" >&5 +echo "$as_me:6602: checking for GLOB_ALTDIRFUNC support" >&5 echo $ECHO_N "checking for GLOB_ALTDIRFUNC support... $ECHO_C" >&6 cat >conftest.$ac_ext <<_ACEOF -#line 6287 "configure" +#line 6605 "configure" #include "confdefs.h" #include @@ -6300,55 +6618,55 @@ #define GLOB_HAS_ALTDIRFUNC 1 EOF - echo "$as_me:6303: result: yes" >&5 + echo "$as_me:6621: result: yes" >&5 echo "${ECHO_T}yes" >&6 else - echo "$as_me:6308: result: no" >&5 + echo "$as_me:6626: result: no" >&5 echo "${ECHO_T}no" >&6 fi rm -f conftest* # Check for g.gl_matchc glob() extension -echo "$as_me:6315: checking for gl_matchc field in glob_t" >&5 +echo "$as_me:6633: checking for gl_matchc field in glob_t" >&5 echo $ECHO_N "checking for gl_matchc field in glob_t... $ECHO_C" >&6 cat >conftest.$ac_ext <<_ACEOF -#line 6318 "configure" +#line 6636 "configure" #include "confdefs.h" - #include + #include int main(void){glob_t g; g.gl_matchc = 1;} _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | egrep "FOUNDIT" >/dev/null 2>&1; then - cat >>confdefs.h <<\EOF + cat >>confdefs.h <<\EOF #define GLOB_HAS_GL_MATCHC 1 EOF - echo "$as_me:6332: result: yes" >&5 + echo "$as_me:6650: result: yes" >&5 echo "${ECHO_T}yes" >&6 else - echo "$as_me:6337: result: no" >&5 + echo "$as_me:6655: result: no" >&5 echo "${ECHO_T}no" >&6 fi rm -f conftest* -echo "$as_me:6343: checking whether struct dirent allocates space for d_name" >&5 +echo "$as_me:6661: checking whether struct dirent allocates space for d_name" >&5 echo $ECHO_N "checking whether struct dirent allocates space for d_name... $ECHO_C" >&6 if test "$cross_compiling" = yes; then - { { echo "$as_me:6346: error: cannot run test program while cross compiling" >&5 + { { echo "$as_me:6664: error: cannot run test program while cross compiling" >&5 echo "$as_me: error: cannot run test program while cross compiling" >&2;} { (exit 1); exit 1; }; } else cat >conftest.$ac_ext <<_ACEOF -#line 6351 "configure" +#line 6669 "configure" #include "confdefs.h" #include @@ -6357,24 +6675,24 @@ _ACEOF rm -f conftest$ac_exeext -if { (eval echo "$as_me:6360: \"$ac_link\"") >&5 +if { (eval echo "$as_me:6678: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:6363: \$? = $ac_status" >&5 + echo "$as_me:6681: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='./conftest$ac_exeext' - { (eval echo "$as_me:6365: \"$ac_try\"") >&5 + { (eval echo "$as_me:6683: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:6368: \$? = $ac_status" >&5 + echo "$as_me:6686: \$? = $ac_status" >&5 (exit $ac_status); }; }; then - echo "$as_me:6370: result: yes" >&5 + echo "$as_me:6688: result: yes" >&5 echo "${ECHO_T}yes" >&6 else echo "$as_me: program exited with status $ac_status" >&5 echo "$as_me: failed program was:" >&5 cat conftest.$ac_ext >&5 - echo "$as_me:6377: result: no" >&5 + echo "$as_me:6695: result: no" >&5 echo "${ECHO_T}no" >&6 cat >>confdefs.h <<\EOF #define BROKEN_ONE_BYTE_DIRENT_D_NAME 1 @@ -6405,15 +6723,15 @@ LIBS="-lskey $LIBS" SKEY_MSG="yes" - echo "$as_me:6408: checking for s/key support" >&5 + echo "$as_me:6726: checking for s/key support" >&5 echo $ECHO_N "checking for s/key support... $ECHO_C" >&6 if test "$cross_compiling" = yes; then - { { echo "$as_me:6411: error: cannot run test program while cross compiling" >&5 + { { echo "$as_me:6729: error: cannot run test program while cross compiling" >&5 echo "$as_me: error: cannot run test program while cross compiling" >&2;} { (exit 1); exit 1; }; } else cat >conftest.$ac_ext <<_ACEOF -#line 6416 "configure" +#line 6734 "configure" #include "confdefs.h" #include @@ -6422,26 +6740,26 @@ _ACEOF rm -f conftest$ac_exeext -if { (eval echo "$as_me:6425: \"$ac_link\"") >&5 +if { (eval echo "$as_me:6743: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:6428: \$? = $ac_status" >&5 + echo "$as_me:6746: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='./conftest$ac_exeext' - { (eval echo "$as_me:6430: \"$ac_try\"") >&5 + { (eval echo "$as_me:6748: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:6433: \$? = $ac_status" >&5 + echo "$as_me:6751: \$? = $ac_status" >&5 (exit $ac_status); }; }; then - echo "$as_me:6435: result: yes" >&5 + echo "$as_me:6753: result: yes" >&5 echo "${ECHO_T}yes" >&6 else echo "$as_me: program exited with status $ac_status" >&5 echo "$as_me: failed program was:" >&5 cat conftest.$ac_ext >&5 - echo "$as_me:6442: result: no" >&5 + echo "$as_me:6760: result: no" >&5 echo "${ECHO_T}no" >&6 - { { echo "$as_me:6444: error: ** Incomplete or missing s/key libraries." >&5 + { { echo "$as_me:6762: error: ** Incomplete or missing s/key libraries." >&5 echo "$as_me: error: ** Incomplete or missing s/key libraries." >&2;} { (exit 1); exit 1; }; } @@ -6485,10 +6803,10 @@ fi LIBWRAP="-lwrap" LIBS="$LIBWRAP $LIBS" - echo "$as_me:6488: checking for libwrap" >&5 + echo "$as_me:6806: checking for libwrap" >&5 echo $ECHO_N "checking for libwrap... $ECHO_C" >&6 cat >conftest.$ac_ext <<_ACEOF -#line 6491 "configure" +#line 6809 "configure" #include "confdefs.h" #include @@ -6503,19 +6821,19 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:6506: \"$ac_link\"") >&5 +if { (eval echo "$as_me:6824: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:6509: \$? = $ac_status" >&5 + echo "$as_me:6827: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:6512: \"$ac_try\"") >&5 + { (eval echo "$as_me:6830: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:6515: \$? = $ac_status" >&5 + echo "$as_me:6833: \$? = $ac_status" >&5 (exit $ac_status); }; }; then - echo "$as_me:6518: result: yes" >&5 + echo "$as_me:6836: result: yes" >&5 echo "${ECHO_T}yes" >&6 cat >>confdefs.h <<\EOF #define LIBWRAP 1 @@ -6527,7 +6845,7 @@ echo "$as_me: failed program was:" >&5 cat conftest.$ac_ext >&5 - { { echo "$as_me:6530: error: *** libwrap missing" >&5 + { { echo "$as_me:6848: error: *** libwrap missing" >&5 echo "$as_me: error: *** libwrap missing" >&2;} { (exit 1); exit 1; }; } @@ -6539,7 +6857,7 @@ fi; for ac_func in \ - arc4random __b64_ntop b64_ntop __b64_pton b64_pton basename \ + arc4random __b64_ntop b64_ntop __b64_pton b64_pton \ bcopy bindresvport_sa clock fchmod fchown freeaddrinfo futimes \ getaddrinfo getcwd getgrouplist getnameinfo getopt \ getpeereid _getpty getrlimit getttyent glob inet_aton \ @@ -6547,20 +6865,20 @@ mkdtemp mmap ngetaddrinfo nsleep ogetaddrinfo openlog_r openpty \ pstat readpassphrase realpath recvmsg rresvport_af sendmsg \ setdtablesize setegid setenv seteuid setgroups setlogin setpcred \ - setproctitle setregid setresgid setresuid setreuid setrlimit \ + setproctitle setregid setreuid setrlimit \ setsid setvbuf sigaction sigvec snprintf socketpair strerror \ - strlcat strlcpy strmode strnvis sysconf tcgetpgrp \ - truncate utimes vhangup vsnprintf waitpid \ + strlcat strlcpy strmode strnvis strtoul sysconf tcgetpgrp \ + truncate updwtmpx utimes vhangup vsnprintf waitpid \ do as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh` -echo "$as_me:6557: checking for $ac_func" >&5 +echo "$as_me:6875: checking for $ac_func" >&5 echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6 if eval "test \"\${$as_ac_var+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 6563 "configure" +#line 6881 "configure" #include "confdefs.h" /* System header to define __stub macros and hopefully few prototypes, which can conflict with char $ac_func (); below. */ @@ -6591,16 +6909,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:6594: \"$ac_link\"") >&5 +if { (eval echo "$as_me:6912: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:6597: \$? = $ac_status" >&5 + echo "$as_me:6915: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:6600: \"$ac_try\"") >&5 + { (eval echo "$as_me:6918: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:6603: \$? = $ac_status" >&5 + echo "$as_me:6921: \$? = $ac_status" >&5 (exit $ac_status); }; }; then eval "$as_ac_var=yes" else @@ -6610,7 +6928,7 @@ fi rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:6613: result: `eval echo '${'$as_ac_var'}'`" >&5 +echo "$as_me:6931: result: `eval echo '${'$as_ac_var'}'`" >&5 echo "${ECHO_T}`eval echo '${'$as_ac_var'}'`" >&6 if test `eval echo '${'$as_ac_var'}'` = yes; then cat >>confdefs.h <&5 +echo "$as_me:6946: checking for $ac_func" >&5 echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6 if eval "test \"\${$as_ac_var+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 6634 "configure" +#line 6952 "configure" #include "confdefs.h" /* System header to define __stub macros and hopefully few prototypes, which can conflict with char $ac_func (); below. */ @@ -6662,16 +6980,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:6665: \"$ac_link\"") >&5 +if { (eval echo "$as_me:6983: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:6668: \$? = $ac_status" >&5 + echo "$as_me:6986: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:6671: \"$ac_try\"") >&5 + { (eval echo "$as_me:6989: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:6674: \$? = $ac_status" >&5 + echo "$as_me:6992: \$? = $ac_status" >&5 (exit $ac_status); }; }; then eval "$as_ac_var=yes" else @@ -6681,7 +6999,7 @@ fi rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:6684: result: `eval echo '${'$as_ac_var'}'`" >&5 +echo "$as_me:7002: result: `eval echo '${'$as_ac_var'}'`" >&5 echo "${ECHO_T}`eval echo '${'$as_ac_var'}'`" >&6 if test `eval echo '${'$as_ac_var'}'` = yes; then cat >>confdefs.h <conftest.$ac_ext <<_ACEOF -#line 6696 "configure" +#line 7014 "configure" #include "confdefs.h" #include @@ -6713,16 +7031,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:6716: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:7034: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:6719: \$? = $ac_status" >&5 + echo "$as_me:7037: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:6722: \"$ac_try\"") >&5 + { (eval echo "$as_me:7040: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:6725: \$? = $ac_status" >&5 + echo "$as_me:7043: \$? = $ac_status" >&5 (exit $ac_status); }; }; then cat >>confdefs.h <<\EOF @@ -6737,7 +7055,7 @@ fi done -echo "$as_me:6740: checking for library containing nanosleep" >&5 +echo "$as_me:7058: checking for library containing nanosleep" >&5 echo $ECHO_N "checking for library containing nanosleep... $ECHO_C" >&6 if test "${ac_cv_search_nanosleep+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -6745,7 +7063,7 @@ ac_func_search_save_LIBS=$LIBS ac_cv_search_nanosleep=no cat >conftest.$ac_ext <<_ACEOF -#line 6748 "configure" +#line 7066 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -6764,16 +7082,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:6767: \"$ac_link\"") >&5 +if { (eval echo "$as_me:7085: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:6770: \$? = $ac_status" >&5 + echo "$as_me:7088: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:6773: \"$ac_try\"") >&5 + { (eval echo "$as_me:7091: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:6776: \$? = $ac_status" >&5 + echo "$as_me:7094: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_search_nanosleep="none required" else @@ -6785,7 +7103,7 @@ for ac_lib in rt posix4; do LIBS="-l$ac_lib $ac_func_search_save_LIBS" cat >conftest.$ac_ext <<_ACEOF -#line 6788 "configure" +#line 7106 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -6804,16 +7122,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:6807: \"$ac_link\"") >&5 +if { (eval echo "$as_me:7125: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:6810: \$? = $ac_status" >&5 + echo "$as_me:7128: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:6813: \"$ac_try\"") >&5 + { (eval echo "$as_me:7131: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:6816: \$? = $ac_status" >&5 + echo "$as_me:7134: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_search_nanosleep="-l$ac_lib" break @@ -6826,7 +7144,7 @@ fi LIBS=$ac_func_search_save_LIBS fi -echo "$as_me:6829: result: $ac_cv_search_nanosleep" >&5 +echo "$as_me:7147: result: $ac_cv_search_nanosleep" >&5 echo "${ECHO_T}$ac_cv_search_nanosleep" >&6 if test "$ac_cv_search_nanosleep" != no; then test "$ac_cv_search_nanosleep" = "none required" || LIBS="$ac_cv_search_nanosleep $LIBS" @@ -6836,13 +7154,13 @@ fi -echo "$as_me:6839: checking for ANSI C header files" >&5 +echo "$as_me:7157: checking for ANSI C header files" >&5 echo $ECHO_N "checking for ANSI C header files... $ECHO_C" >&6 if test "${ac_cv_header_stdc+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 6845 "configure" +#line 7163 "configure" #include "confdefs.h" #include #include @@ -6850,13 +7168,13 @@ #include _ACEOF -if { (eval echo "$as_me:6853: \"$ac_cpp conftest.$ac_ext\"") >&5 +if { (eval echo "$as_me:7171: \"$ac_cpp conftest.$ac_ext\"") >&5 (eval $ac_cpp conftest.$ac_ext) 2>conftest.er1 ac_status=$? egrep -v '^ *\+' conftest.er1 >conftest.err rm -f conftest.er1 cat conftest.err >&5 - echo "$as_me:6859: \$? = $ac_status" >&5 + echo "$as_me:7177: \$? = $ac_status" >&5 (exit $ac_status); } >/dev/null; then if test -s conftest.err; then ac_cpp_err=$ac_c_preproc_warn_flag @@ -6878,7 +7196,7 @@ if test $ac_cv_header_stdc = yes; then # SunOS 4.x string.h does not declare mem*, contrary to ANSI. cat >conftest.$ac_ext <<_ACEOF -#line 6881 "configure" +#line 7199 "configure" #include "confdefs.h" #include @@ -6896,7 +7214,7 @@ if test $ac_cv_header_stdc = yes; then # ISC 2.0.2 stdlib.h does not declare free, contrary to ANSI. cat >conftest.$ac_ext <<_ACEOF -#line 6899 "configure" +#line 7217 "configure" #include "confdefs.h" #include @@ -6917,7 +7235,7 @@ : else cat >conftest.$ac_ext <<_ACEOF -#line 6920 "configure" +#line 7238 "configure" #include "confdefs.h" #include #if ((' ' & 0x0FF) == 0x020) @@ -6943,15 +7261,15 @@ } _ACEOF rm -f conftest$ac_exeext -if { (eval echo "$as_me:6946: \"$ac_link\"") >&5 +if { (eval echo "$as_me:7264: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:6949: \$? = $ac_status" >&5 + echo "$as_me:7267: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='./conftest$ac_exeext' - { (eval echo "$as_me:6951: \"$ac_try\"") >&5 + { (eval echo "$as_me:7269: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:6954: \$? = $ac_status" >&5 + echo "$as_me:7272: \$? = $ac_status" >&5 (exit $ac_status); }; }; then : else @@ -6964,7 +7282,7 @@ fi fi fi -echo "$as_me:6967: result: $ac_cv_header_stdc" >&5 +echo "$as_me:7285: result: $ac_cv_header_stdc" >&5 echo "${ECHO_T}$ac_cv_header_stdc" >&6 if test $ac_cv_header_stdc = yes; then @@ -6980,28 +7298,28 @@ inttypes.h stdint.h unistd.h do as_ac_Header=`echo "ac_cv_header_$ac_header" | $as_tr_sh` -echo "$as_me:6983: checking for $ac_header" >&5 +echo "$as_me:7301: checking for $ac_header" >&5 echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6 if eval "test \"\${$as_ac_Header+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 6989 "configure" +#line 7307 "configure" #include "confdefs.h" $ac_includes_default #include <$ac_header> _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:6995: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:7313: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:6998: \$? = $ac_status" >&5 + echo "$as_me:7316: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:7001: \"$ac_try\"") >&5 + { (eval echo "$as_me:7319: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:7004: \$? = $ac_status" >&5 + echo "$as_me:7322: \$? = $ac_status" >&5 (exit $ac_status); }; }; then eval "$as_ac_Header=yes" else @@ -7011,7 +7329,7 @@ fi rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:7014: result: `eval echo '${'$as_ac_Header'}'`" >&5 +echo "$as_me:7332: result: `eval echo '${'$as_ac_Header'}'`" >&5 echo "${ECHO_T}`eval echo '${'$as_ac_Header'}'`" >&6 if test `eval echo '${'$as_ac_Header'}'` = yes; then cat >>confdefs.h <&5 +echo "$as_me:7342: checking whether strsep is declared" >&5 echo $ECHO_N "checking whether strsep is declared... $ECHO_C" >&6 if test "${ac_cv_have_decl_strsep+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 7030 "configure" +#line 7348 "configure" #include "confdefs.h" $ac_includes_default int @@ -7042,16 +7360,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:7045: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:7363: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:7048: \$? = $ac_status" >&5 + echo "$as_me:7366: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:7051: \"$ac_try\"") >&5 + { (eval echo "$as_me:7369: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:7054: \$? = $ac_status" >&5 + echo "$as_me:7372: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_have_decl_strsep=yes else @@ -7061,20 +7379,20 @@ fi rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:7064: result: $ac_cv_have_decl_strsep" >&5 +echo "$as_me:7382: result: $ac_cv_have_decl_strsep" >&5 echo "${ECHO_T}$ac_cv_have_decl_strsep" >&6 if test $ac_cv_have_decl_strsep = yes; then for ac_func in strsep do as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh` -echo "$as_me:7071: checking for $ac_func" >&5 +echo "$as_me:7389: checking for $ac_func" >&5 echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6 if eval "test \"\${$as_ac_var+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 7077 "configure" +#line 7395 "configure" #include "confdefs.h" /* System header to define __stub macros and hopefully few prototypes, which can conflict with char $ac_func (); below. */ @@ -7105,16 +7423,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:7108: \"$ac_link\"") >&5 +if { (eval echo "$as_me:7426: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:7111: \$? = $ac_status" >&5 + echo "$as_me:7429: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:7114: \"$ac_try\"") >&5 + { (eval echo "$as_me:7432: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:7117: \$? = $ac_status" >&5 + echo "$as_me:7435: \$? = $ac_status" >&5 (exit $ac_status); }; }; then eval "$as_ac_var=yes" else @@ -7124,7 +7442,7 @@ fi rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:7127: result: `eval echo '${'$as_ac_var'}'`" >&5 +echo "$as_me:7445: result: `eval echo '${'$as_ac_var'}'`" >&5 echo "${ECHO_T}`eval echo '${'$as_ac_var'}'`" >&6 if test `eval echo '${'$as_ac_var'}'` = yes; then cat >>confdefs.h <&5 +echo "$as_me:7457: checking whether getrusage is declared" >&5 echo $ECHO_N "checking whether getrusage is declared... $ECHO_C" >&6 if test "${ac_cv_have_decl_getrusage+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 7145 "configure" +#line 7463 "configure" #include "confdefs.h" $ac_includes_default int @@ -7157,16 +7475,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:7160: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:7478: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:7163: \$? = $ac_status" >&5 + echo "$as_me:7481: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:7166: \"$ac_try\"") >&5 + { (eval echo "$as_me:7484: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:7169: \$? = $ac_status" >&5 + echo "$as_me:7487: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_have_decl_getrusage=yes else @@ -7176,20 +7494,20 @@ fi rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:7179: result: $ac_cv_have_decl_getrusage" >&5 +echo "$as_me:7497: result: $ac_cv_have_decl_getrusage" >&5 echo "${ECHO_T}$ac_cv_have_decl_getrusage" >&6 if test $ac_cv_have_decl_getrusage = yes; then for ac_func in getrusage do as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh` -echo "$as_me:7186: checking for $ac_func" >&5 +echo "$as_me:7504: checking for $ac_func" >&5 echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6 if eval "test \"\${$as_ac_var+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 7192 "configure" +#line 7510 "configure" #include "confdefs.h" /* System header to define __stub macros and hopefully few prototypes, which can conflict with char $ac_func (); below. */ @@ -7220,16 +7538,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:7223: \"$ac_link\"") >&5 +if { (eval echo "$as_me:7541: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:7226: \$? = $ac_status" >&5 + echo "$as_me:7544: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:7229: \"$ac_try\"") >&5 + { (eval echo "$as_me:7547: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:7232: \$? = $ac_status" >&5 + echo "$as_me:7550: \$? = $ac_status" >&5 (exit $ac_status); }; }; then eval "$as_ac_var=yes" else @@ -7239,7 +7557,7 @@ fi rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:7242: result: `eval echo '${'$as_ac_var'}'`" >&5 +echo "$as_me:7560: result: `eval echo '${'$as_ac_var'}'`" >&5 echo "${ECHO_T}`eval echo '${'$as_ac_var'}'`" >&6 if test `eval echo '${'$as_ac_var'}'` = yes; then cat >>confdefs.h <&5 +echo "$as_me:7572: checking whether tcsendbreak is declared" >&5 echo $ECHO_N "checking whether tcsendbreak is declared... $ECHO_C" >&6 if test "${ac_cv_have_decl_tcsendbreak+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 7260 "configure" +#line 7578 "configure" #include "confdefs.h" #include @@ -7273,16 +7591,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:7276: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:7594: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:7279: \$? = $ac_status" >&5 + echo "$as_me:7597: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:7282: \"$ac_try\"") >&5 + { (eval echo "$as_me:7600: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:7285: \$? = $ac_status" >&5 + echo "$as_me:7603: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_have_decl_tcsendbreak=yes else @@ -7292,7 +7610,7 @@ fi rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:7295: result: $ac_cv_have_decl_tcsendbreak" >&5 +echo "$as_me:7613: result: $ac_cv_have_decl_tcsendbreak" >&5 echo "${ECHO_T}$ac_cv_have_decl_tcsendbreak" >&6 if test $ac_cv_have_decl_tcsendbreak = yes; then cat >>confdefs.h <<\EOF @@ -7304,13 +7622,13 @@ for ac_func in tcsendbreak do as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh` -echo "$as_me:7307: checking for $ac_func" >&5 +echo "$as_me:7625: checking for $ac_func" >&5 echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6 if eval "test \"\${$as_ac_var+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 7313 "configure" +#line 7631 "configure" #include "confdefs.h" /* System header to define __stub macros and hopefully few prototypes, which can conflict with char $ac_func (); below. */ @@ -7341,16 +7659,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:7344: \"$ac_link\"") >&5 +if { (eval echo "$as_me:7662: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:7347: \$? = $ac_status" >&5 + echo "$as_me:7665: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:7350: \"$ac_try\"") >&5 + { (eval echo "$as_me:7668: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:7353: \$? = $ac_status" >&5 + echo "$as_me:7671: \$? = $ac_status" >&5 (exit $ac_status); }; }; then eval "$as_ac_var=yes" else @@ -7360,7 +7678,7 @@ fi rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:7363: result: `eval echo '${'$as_ac_var'}'`" >&5 +echo "$as_me:7681: result: `eval echo '${'$as_ac_var'}'`" >&5 echo "${ECHO_T}`eval echo '${'$as_ac_var'}'`" >&6 if test `eval echo '${'$as_ac_var'}'` = yes; then cat >>confdefs.h <&5 +echo "$as_me:7696: checking for $ac_func" >&5 echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6 if eval "test \"\${$as_ac_var+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 7384 "configure" +#line 7702 "configure" #include "confdefs.h" /* System header to define __stub macros and hopefully few prototypes, which can conflict with char $ac_func (); below. */ @@ -7412,16 +7730,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:7415: \"$ac_link\"") >&5 +if { (eval echo "$as_me:7733: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:7418: \$? = $ac_status" >&5 + echo "$as_me:7736: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:7421: \"$ac_try\"") >&5 + { (eval echo "$as_me:7739: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:7424: \$? = $ac_status" >&5 + echo "$as_me:7742: \$? = $ac_status" >&5 (exit $ac_status); }; }; then eval "$as_ac_var=yes" else @@ -7431,26 +7749,70 @@ fi rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:7434: result: `eval echo '${'$as_ac_var'}'`" >&5 +echo "$as_me:7752: result: `eval echo '${'$as_ac_var'}'`" >&5 echo "${ECHO_T}`eval echo '${'$as_ac_var'}'`" >&6 if test `eval echo '${'$as_ac_var'}'` = yes; then cat >>confdefs.h <&5 +echo $ECHO_N "checking if setresuid seems to work... $ECHO_C" >&6 + if test "$cross_compiling" = yes; then + { { echo "$as_me:7762: error: cannot run test program while cross compiling" >&5 +echo "$as_me: error: cannot run test program while cross compiling" >&2;} + { (exit 1); exit 1; }; } +else + cat >conftest.$ac_ext <<_ACEOF +#line 7767 "configure" +#include "confdefs.h" + +#include +#include +int main(){errno=0; setresuid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);} + +_ACEOF +rm -f conftest$ac_exeext +if { (eval echo "$as_me:7776: \"$ac_link\"") >&5 + (eval $ac_link) 2>&5 + ac_status=$? + echo "$as_me:7779: \$? = $ac_status" >&5 + (exit $ac_status); } && { ac_try='./conftest$ac_exeext' + { (eval echo "$as_me:7781: \"$ac_try\"") >&5 + (eval $ac_try) 2>&5 + ac_status=$? + echo "$as_me:7784: \$? = $ac_status" >&5 + (exit $ac_status); }; }; then + echo "$as_me:7786: result: yes" >&5 +echo "${ECHO_T}yes" >&6 +else + echo "$as_me: program exited with status $ac_status" >&5 +echo "$as_me: failed program was:" >&5 +cat conftest.$ac_ext >&5 +cat >>confdefs.h <<\EOF +#define BROKEN_SETRESUID 1 +EOF + + echo "$as_me:7796: result: not implemented" >&5 +echo "${ECHO_T}not implemented" >&6 + +fi +rm -f core core.* *.core conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext +fi + fi done -for ac_func in endutent getutent getutid getutline pututline setutent +for ac_func in setresgid do as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh` -echo "$as_me:7447: checking for $ac_func" >&5 +echo "$as_me:7809: checking for $ac_func" >&5 echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6 if eval "test \"\${$as_ac_var+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 7453 "configure" +#line 7815 "configure" #include "confdefs.h" /* System header to define __stub macros and hopefully few prototypes, which can conflict with char $ac_func (); below. */ @@ -7481,16 +7843,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:7484: \"$ac_link\"") >&5 +if { (eval echo "$as_me:7846: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:7487: \$? = $ac_status" >&5 + echo "$as_me:7849: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:7490: \"$ac_try\"") >&5 + { (eval echo "$as_me:7852: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:7493: \$? = $ac_status" >&5 + echo "$as_me:7855: \$? = $ac_status" >&5 (exit $ac_status); }; }; then eval "$as_ac_var=yes" else @@ -7500,26 +7862,70 @@ fi rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:7503: result: `eval echo '${'$as_ac_var'}'`" >&5 +echo "$as_me:7865: result: `eval echo '${'$as_ac_var'}'`" >&5 echo "${ECHO_T}`eval echo '${'$as_ac_var'}'`" >&6 if test `eval echo '${'$as_ac_var'}'` = yes; then cat >>confdefs.h <&5 +echo $ECHO_N "checking if setresgid seems to work... $ECHO_C" >&6 + if test "$cross_compiling" = yes; then + { { echo "$as_me:7875: error: cannot run test program while cross compiling" >&5 +echo "$as_me: error: cannot run test program while cross compiling" >&2;} + { (exit 1); exit 1; }; } +else + cat >conftest.$ac_ext <<_ACEOF +#line 7880 "configure" +#include "confdefs.h" + +#include +#include +int main(){errno=0; setresgid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);} + +_ACEOF +rm -f conftest$ac_exeext +if { (eval echo "$as_me:7889: \"$ac_link\"") >&5 + (eval $ac_link) 2>&5 + ac_status=$? + echo "$as_me:7892: \$? = $ac_status" >&5 + (exit $ac_status); } && { ac_try='./conftest$ac_exeext' + { (eval echo "$as_me:7894: \"$ac_try\"") >&5 + (eval $ac_try) 2>&5 + ac_status=$? + echo "$as_me:7897: \$? = $ac_status" >&5 + (exit $ac_status); }; }; then + echo "$as_me:7899: result: yes" >&5 +echo "${ECHO_T}yes" >&6 +else + echo "$as_me: program exited with status $ac_status" >&5 +echo "$as_me: failed program was:" >&5 +cat conftest.$ac_ext >&5 +cat >>confdefs.h <<\EOF +#define BROKEN_SETRESGID 1 +EOF + + echo "$as_me:7909: result: not implemented" >&5 +echo "${ECHO_T}not implemented" >&6 + +fi +rm -f core core.* *.core conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext +fi + fi done -for ac_func in utmpname +for ac_func in gettimeofday time do as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh` -echo "$as_me:7516: checking for $ac_func" >&5 +echo "$as_me:7922: checking for $ac_func" >&5 echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6 if eval "test \"\${$as_ac_var+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 7522 "configure" +#line 7928 "configure" #include "confdefs.h" /* System header to define __stub macros and hopefully few prototypes, which can conflict with char $ac_func (); below. */ @@ -7550,16 +7956,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:7553: \"$ac_link\"") >&5 +if { (eval echo "$as_me:7959: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:7556: \$? = $ac_status" >&5 + echo "$as_me:7962: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:7559: \"$ac_try\"") >&5 + { (eval echo "$as_me:7965: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:7562: \$? = $ac_status" >&5 + echo "$as_me:7968: \$? = $ac_status" >&5 (exit $ac_status); }; }; then eval "$as_ac_var=yes" else @@ -7569,7 +7975,7 @@ fi rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:7572: result: `eval echo '${'$as_ac_var'}'`" >&5 +echo "$as_me:7978: result: `eval echo '${'$as_ac_var'}'`" >&5 echo "${ECHO_T}`eval echo '${'$as_ac_var'}'`" >&6 if test `eval echo '${'$as_ac_var'}'` = yes; then cat >>confdefs.h <&5 +echo "$as_me:7991: checking for $ac_func" >&5 echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6 if eval "test \"\${$as_ac_var+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 7591 "configure" +#line 7997 "configure" #include "confdefs.h" /* System header to define __stub macros and hopefully few prototypes, which can conflict with char $ac_func (); below. */ @@ -7619,16 +8025,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:7622: \"$ac_link\"") >&5 +if { (eval echo "$as_me:8028: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:7625: \$? = $ac_status" >&5 + echo "$as_me:8031: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:7628: \"$ac_try\"") >&5 + { (eval echo "$as_me:8034: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:7631: \$? = $ac_status" >&5 + echo "$as_me:8037: \$? = $ac_status" >&5 (exit $ac_status); }; }; then eval "$as_ac_var=yes" else @@ -7638,7 +8044,7 @@ fi rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:7641: result: `eval echo '${'$as_ac_var'}'`" >&5 +echo "$as_me:8047: result: `eval echo '${'$as_ac_var'}'`" >&5 echo "${ECHO_T}`eval echo '${'$as_ac_var'}'`" >&6 if test `eval echo '${'$as_ac_var'}'` = yes; then cat >>confdefs.h <&5 +echo "$as_me:8060: checking for $ac_func" >&5 echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6 if eval "test \"\${$as_ac_var+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 7660 "configure" +#line 8066 "configure" #include "confdefs.h" /* System header to define __stub macros and hopefully few prototypes, which can conflict with char $ac_func (); below. */ @@ -7688,16 +8094,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:7691: \"$ac_link\"") >&5 +if { (eval echo "$as_me:8097: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:7694: \$? = $ac_status" >&5 + echo "$as_me:8100: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:7697: \"$ac_try\"") >&5 + { (eval echo "$as_me:8103: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:7700: \$? = $ac_status" >&5 + echo "$as_me:8106: \$? = $ac_status" >&5 (exit $ac_status); }; }; then eval "$as_ac_var=yes" else @@ -7707,7 +8113,7 @@ fi rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:7710: result: `eval echo '${'$as_ac_var'}'`" >&5 +echo "$as_me:8116: result: `eval echo '${'$as_ac_var'}'`" >&5 echo "${ECHO_T}`eval echo '${'$as_ac_var'}'`" >&6 if test `eval echo '${'$as_ac_var'}'` = yes; then cat >>confdefs.h <&5 -echo $ECHO_N "checking for daemon... $ECHO_C" >&6 -if test "${ac_cv_func_daemon+set}" = set; then +for ac_func in endutxent getutxent getutxid getutxline pututxline +do +as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh` +echo "$as_me:8129: checking for $ac_func" >&5 +echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6 +if eval "test \"\${$as_ac_var+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 7726 "configure" +#line 8135 "configure" #include "confdefs.h" /* System header to define __stub macros and hopefully few prototypes, - which can conflict with char daemon (); below. */ + which can conflict with char $ac_func (); below. */ #include /* Override any gcc2 internal prototype to avoid an error. */ #ifdef __cplusplus @@ -7734,7 +8143,7 @@ #endif /* We use char because int might match the return type of a gcc2 builtin and then its argument prototype would still apply. */ -char daemon (); +char $ac_func (); char (*f) (); int @@ -7743,10 +8152,10 @@ /* The GNU C library defines this for functions which it implements to always fail with ENOSYS. Some functions are actually named something starting with __ and the normal name is an alias. */ -#if defined (__stub_daemon) || defined (__stub___daemon) +#if defined (__stub_$ac_func) || defined (__stub___$ac_func) choke me #else -f = daemon; +f = $ac_func; #endif ; @@ -7754,70 +8163,205 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:7757: \"$ac_link\"") >&5 +if { (eval echo "$as_me:8166: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:7760: \$? = $ac_status" >&5 + echo "$as_me:8169: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:7763: \"$ac_try\"") >&5 + { (eval echo "$as_me:8172: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:7766: \$? = $ac_status" >&5 + echo "$as_me:8175: \$? = $ac_status" >&5 (exit $ac_status); }; }; then - ac_cv_func_daemon=yes + eval "$as_ac_var=yes" else echo "$as_me: failed program was:" >&5 cat conftest.$ac_ext >&5 -ac_cv_func_daemon=no +eval "$as_ac_var=no" fi rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:7776: result: $ac_cv_func_daemon" >&5 -echo "${ECHO_T}$ac_cv_func_daemon" >&6 -if test $ac_cv_func_daemon = yes; then - cat >>confdefs.h <<\EOF -#define HAVE_DAEMON 1 +echo "$as_me:8185: result: `eval echo '${'$as_ac_var'}'`" >&5 +echo "${ECHO_T}`eval echo '${'$as_ac_var'}'`" >&6 +if test `eval echo '${'$as_ac_var'}'` = yes; then + cat >>confdefs.h <&5 -echo $ECHO_N "checking for daemon in -lbsd... $ECHO_C" >&6 -if test "${ac_cv_lib_bsd_daemon+set}" = set; then +fi +done + +for ac_func in setutxent utmpxname +do +as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh` +echo "$as_me:8198: checking for $ac_func" >&5 +echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6 +if eval "test \"\${$as_ac_var+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else - ac_check_lib_save_LIBS=$LIBS -LIBS="-lbsd $LIBS" -cat >conftest.$ac_ext <<_ACEOF -#line 7792 "configure" + cat >conftest.$ac_ext <<_ACEOF +#line 8204 "configure" #include "confdefs.h" - +/* System header to define __stub macros and hopefully few prototypes, + which can conflict with char $ac_func (); below. */ +#include /* Override any gcc2 internal prototype to avoid an error. */ #ifdef __cplusplus extern "C" #endif /* We use char because int might match the return type of a gcc2 builtin and then its argument prototype would still apply. */ -char daemon (); +char $ac_func (); +char (*f) (); + int main () { -daemon (); - ; - return 0; -} -_ACEOF +/* The GNU C library defines this for functions which it implements + to always fail with ENOSYS. Some functions are actually named + something starting with __ and the normal name is an alias. */ +#if defined (__stub_$ac_func) || defined (__stub___$ac_func) +choke me +#else +f = $ac_func; +#endif + + ; + return 0; +} +_ACEOF +rm -f conftest.$ac_objext conftest$ac_exeext +if { (eval echo "$as_me:8235: \"$ac_link\"") >&5 + (eval $ac_link) 2>&5 + ac_status=$? + echo "$as_me:8238: \$? = $ac_status" >&5 + (exit $ac_status); } && + { ac_try='test -s conftest$ac_exeext' + { (eval echo "$as_me:8241: \"$ac_try\"") >&5 + (eval $ac_try) 2>&5 + ac_status=$? + echo "$as_me:8244: \$? = $ac_status" >&5 + (exit $ac_status); }; }; then + eval "$as_ac_var=yes" +else + echo "$as_me: failed program was:" >&5 +cat conftest.$ac_ext >&5 +eval "$as_ac_var=no" +fi +rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext +fi +echo "$as_me:8254: result: `eval echo '${'$as_ac_var'}'`" >&5 +echo "${ECHO_T}`eval echo '${'$as_ac_var'}'`" >&6 +if test `eval echo '${'$as_ac_var'}'` = yes; then + cat >>confdefs.h <&5 +echo $ECHO_N "checking for daemon... $ECHO_C" >&6 +if test "${ac_cv_func_daemon+set}" = set; then + echo $ECHO_N "(cached) $ECHO_C" >&6 +else + cat >conftest.$ac_ext <<_ACEOF +#line 8270 "configure" +#include "confdefs.h" +/* System header to define __stub macros and hopefully few prototypes, + which can conflict with char daemon (); below. */ +#include +/* Override any gcc2 internal prototype to avoid an error. */ +#ifdef __cplusplus +extern "C" +#endif +/* We use char because int might match the return type of a gcc2 + builtin and then its argument prototype would still apply. */ +char daemon (); +char (*f) (); + +int +main () +{ +/* The GNU C library defines this for functions which it implements + to always fail with ENOSYS. Some functions are actually named + something starting with __ and the normal name is an alias. */ +#if defined (__stub_daemon) || defined (__stub___daemon) +choke me +#else +f = daemon; +#endif + + ; + return 0; +} +_ACEOF +rm -f conftest.$ac_objext conftest$ac_exeext +if { (eval echo "$as_me:8301: \"$ac_link\"") >&5 + (eval $ac_link) 2>&5 + ac_status=$? + echo "$as_me:8304: \$? = $ac_status" >&5 + (exit $ac_status); } && + { ac_try='test -s conftest$ac_exeext' + { (eval echo "$as_me:8307: \"$ac_try\"") >&5 + (eval $ac_try) 2>&5 + ac_status=$? + echo "$as_me:8310: \$? = $ac_status" >&5 + (exit $ac_status); }; }; then + ac_cv_func_daemon=yes +else + echo "$as_me: failed program was:" >&5 +cat conftest.$ac_ext >&5 +ac_cv_func_daemon=no +fi +rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext +fi +echo "$as_me:8320: result: $ac_cv_func_daemon" >&5 +echo "${ECHO_T}$ac_cv_func_daemon" >&6 +if test $ac_cv_func_daemon = yes; then + cat >>confdefs.h <<\EOF +#define HAVE_DAEMON 1 +EOF + +else + echo "$as_me:8328: checking for daemon in -lbsd" >&5 +echo $ECHO_N "checking for daemon in -lbsd... $ECHO_C" >&6 +if test "${ac_cv_lib_bsd_daemon+set}" = set; then + echo $ECHO_N "(cached) $ECHO_C" >&6 +else + ac_check_lib_save_LIBS=$LIBS +LIBS="-lbsd $LIBS" +cat >conftest.$ac_ext <<_ACEOF +#line 8336 "configure" +#include "confdefs.h" + +/* Override any gcc2 internal prototype to avoid an error. */ +#ifdef __cplusplus +extern "C" +#endif +/* We use char because int might match the return type of a gcc2 + builtin and then its argument prototype would still apply. */ +char daemon (); +int +main () +{ +daemon (); + ; + return 0; +} +_ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:7811: \"$ac_link\"") >&5 +if { (eval echo "$as_me:8355: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:7814: \$? = $ac_status" >&5 + echo "$as_me:8358: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:7817: \"$ac_try\"") >&5 + { (eval echo "$as_me:8361: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:7820: \$? = $ac_status" >&5 + echo "$as_me:8364: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_lib_bsd_daemon=yes else @@ -7828,7 +8372,7 @@ rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi -echo "$as_me:7831: result: $ac_cv_lib_bsd_daemon" >&5 +echo "$as_me:8375: result: $ac_cv_lib_bsd_daemon" >&5 echo "${ECHO_T}$ac_cv_lib_bsd_daemon" >&6 if test $ac_cv_lib_bsd_daemon = yes; then LIBS="$LIBS -lbsd"; cat >>confdefs.h <<\EOF @@ -7839,13 +8383,13 @@ fi -echo "$as_me:7842: checking for getpagesize" >&5 +echo "$as_me:8386: checking for getpagesize" >&5 echo $ECHO_N "checking for getpagesize... $ECHO_C" >&6 if test "${ac_cv_func_getpagesize+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 7848 "configure" +#line 8392 "configure" #include "confdefs.h" /* System header to define __stub macros and hopefully few prototypes, which can conflict with char getpagesize (); below. */ @@ -7876,16 +8420,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:7879: \"$ac_link\"") >&5 +if { (eval echo "$as_me:8423: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:7882: \$? = $ac_status" >&5 + echo "$as_me:8426: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:7885: \"$ac_try\"") >&5 + { (eval echo "$as_me:8429: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:7888: \$? = $ac_status" >&5 + echo "$as_me:8432: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_func_getpagesize=yes else @@ -7895,7 +8439,7 @@ fi rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:7898: result: $ac_cv_func_getpagesize" >&5 +echo "$as_me:8442: result: $ac_cv_func_getpagesize" >&5 echo "${ECHO_T}$ac_cv_func_getpagesize" >&6 if test $ac_cv_func_getpagesize = yes; then cat >>confdefs.h <<\EOF @@ -7903,7 +8447,7 @@ EOF else - echo "$as_me:7906: checking for getpagesize in -lucb" >&5 + echo "$as_me:8450: checking for getpagesize in -lucb" >&5 echo $ECHO_N "checking for getpagesize in -lucb... $ECHO_C" >&6 if test "${ac_cv_lib_ucb_getpagesize+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -7911,7 +8455,7 @@ ac_check_lib_save_LIBS=$LIBS LIBS="-lucb $LIBS" cat >conftest.$ac_ext <<_ACEOF -#line 7914 "configure" +#line 8458 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -7930,16 +8474,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:7933: \"$ac_link\"") >&5 +if { (eval echo "$as_me:8477: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:7936: \$? = $ac_status" >&5 + echo "$as_me:8480: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:7939: \"$ac_try\"") >&5 + { (eval echo "$as_me:8483: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:7942: \$? = $ac_status" >&5 + echo "$as_me:8486: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_lib_ucb_getpagesize=yes else @@ -7950,7 +8494,7 @@ rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi -echo "$as_me:7953: result: $ac_cv_lib_ucb_getpagesize" >&5 +echo "$as_me:8497: result: $ac_cv_lib_ucb_getpagesize" >&5 echo "${ECHO_T}$ac_cv_lib_ucb_getpagesize" >&6 if test $ac_cv_lib_ucb_getpagesize = yes; then LIBS="$LIBS -lucb"; cat >>confdefs.h <<\EOF @@ -7963,15 +8507,15 @@ # Check for broken snprintf if test "x$ac_cv_func_snprintf" = "xyes" ; then - echo "$as_me:7966: checking whether snprintf correctly terminates long strings" >&5 + echo "$as_me:8510: checking whether snprintf correctly terminates long strings" >&5 echo $ECHO_N "checking whether snprintf correctly terminates long strings... $ECHO_C" >&6 if test "$cross_compiling" = yes; then - { { echo "$as_me:7969: error: cannot run test program while cross compiling" >&5 + { { echo "$as_me:8513: error: cannot run test program while cross compiling" >&5 echo "$as_me: error: cannot run test program while cross compiling" >&2;} { (exit 1); exit 1; }; } else cat >conftest.$ac_ext <<_ACEOF -#line 7974 "configure" +#line 8518 "configure" #include "confdefs.h" #include @@ -7979,30 +8523,30 @@ _ACEOF rm -f conftest$ac_exeext -if { (eval echo "$as_me:7982: \"$ac_link\"") >&5 +if { (eval echo "$as_me:8526: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:7985: \$? = $ac_status" >&5 + echo "$as_me:8529: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='./conftest$ac_exeext' - { (eval echo "$as_me:7987: \"$ac_try\"") >&5 + { (eval echo "$as_me:8531: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:7990: \$? = $ac_status" >&5 + echo "$as_me:8534: \$? = $ac_status" >&5 (exit $ac_status); }; }; then - echo "$as_me:7992: result: yes" >&5 + echo "$as_me:8536: result: yes" >&5 echo "${ECHO_T}yes" >&6 else echo "$as_me: program exited with status $ac_status" >&5 echo "$as_me: failed program was:" >&5 cat conftest.$ac_ext >&5 - echo "$as_me:7999: result: no" >&5 + echo "$as_me:8543: result: no" >&5 echo "${ECHO_T}no" >&6 cat >>confdefs.h <<\EOF #define BROKEN_SNPRINTF 1 EOF - { echo "$as_me:8005: WARNING: ****** Your snprintf() function is broken, complain to your vendor" >&5 + { echo "$as_me:8549: WARNING: ****** Your snprintf() function is broken, complain to your vendor" >&5 echo "$as_me: WARNING: ****** Your snprintf() function is broken, complain to your vendor" >&2;} fi @@ -8011,11 +8555,11 @@ fi if test "x$ac_cv_func_mkdtemp" = "xyes" ; then -echo "$as_me:8014: checking for (overly) strict mkstemp" >&5 +echo "$as_me:8558: checking for (overly) strict mkstemp" >&5 echo $ECHO_N "checking for (overly) strict mkstemp... $ECHO_C" >&6 if test "$cross_compiling" = yes; then - echo "$as_me:8018: result: yes" >&5 + echo "$as_me:8562: result: yes" >&5 echo "${ECHO_T}yes" >&6 cat >>confdefs.h <<\EOF #define HAVE_STRICT_MKSTEMP 1 @@ -8023,7 +8567,7 @@ else cat >conftest.$ac_ext <<_ACEOF -#line 8026 "configure" +#line 8570 "configure" #include "confdefs.h" #include @@ -8035,18 +8579,18 @@ _ACEOF rm -f conftest$ac_exeext -if { (eval echo "$as_me:8038: \"$ac_link\"") >&5 +if { (eval echo "$as_me:8582: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:8041: \$? = $ac_status" >&5 + echo "$as_me:8585: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='./conftest$ac_exeext' - { (eval echo "$as_me:8043: \"$ac_try\"") >&5 + { (eval echo "$as_me:8587: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:8046: \$? = $ac_status" >&5 + echo "$as_me:8590: \$? = $ac_status" >&5 (exit $ac_status); }; }; then - echo "$as_me:8049: result: no" >&5 + echo "$as_me:8593: result: no" >&5 echo "${ECHO_T}no" >&6 else @@ -8054,7 +8598,7 @@ echo "$as_me: failed program was:" >&5 cat conftest.$ac_ext >&5 - echo "$as_me:8057: result: yes" >&5 + echo "$as_me:8601: result: yes" >&5 echo "${ECHO_T}yes" >&6 cat >>confdefs.h <<\EOF #define HAVE_STRICT_MKSTEMP 1 @@ -8066,15 +8610,15 @@ fi if test ! -z "$check_for_openpty_ctty_bug"; then - echo "$as_me:8069: checking if openpty correctly handles controlling tty" >&5 + echo "$as_me:8613: checking if openpty correctly handles controlling tty" >&5 echo $ECHO_N "checking if openpty correctly handles controlling tty... $ECHO_C" >&6 if test "$cross_compiling" = yes; then - { { echo "$as_me:8072: error: cannot run test program while cross compiling" >&5 + { { echo "$as_me:8616: error: cannot run test program while cross compiling" >&5 echo "$as_me: error: cannot run test program while cross compiling" >&2;} { (exit 1); exit 1; }; } else cat >conftest.$ac_ext <<_ACEOF -#line 8077 "configure" +#line 8621 "configure" #include "confdefs.h" #include @@ -8111,18 +8655,18 @@ _ACEOF rm -f conftest$ac_exeext -if { (eval echo "$as_me:8114: \"$ac_link\"") >&5 +if { (eval echo "$as_me:8658: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:8117: \$? = $ac_status" >&5 + echo "$as_me:8661: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='./conftest$ac_exeext' - { (eval echo "$as_me:8119: \"$ac_try\"") >&5 + { (eval echo "$as_me:8663: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:8122: \$? = $ac_status" >&5 + echo "$as_me:8666: \$? = $ac_status" >&5 (exit $ac_status); }; }; then - echo "$as_me:8125: result: yes" >&5 + echo "$as_me:8669: result: yes" >&5 echo "${ECHO_T}yes" >&6 else @@ -8130,7 +8674,7 @@ echo "$as_me: failed program was:" >&5 cat conftest.$ac_ext >&5 - echo "$as_me:8133: result: no" >&5 + echo "$as_me:8677: result: no" >&5 echo "${ECHO_T}no" >&6 cat >>confdefs.h <<\EOF #define SSHD_ACQUIRES_CTTY 1 @@ -8141,14 +8685,14 @@ fi fi -echo "$as_me:8144: checking whether getpgrp takes no argument" >&5 +echo "$as_me:8688: checking whether getpgrp takes no argument" >&5 echo $ECHO_N "checking whether getpgrp takes no argument... $ECHO_C" >&6 if test "${ac_cv_func_getpgrp_void+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else # Use it with a single arg. cat >conftest.$ac_ext <<_ACEOF -#line 8151 "configure" +#line 8695 "configure" #include "confdefs.h" $ac_includes_default int @@ -8160,16 +8704,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:8163: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:8707: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:8166: \$? = $ac_status" >&5 + echo "$as_me:8710: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:8169: \"$ac_try\"") >&5 + { (eval echo "$as_me:8713: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:8172: \$? = $ac_status" >&5 + echo "$as_me:8716: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_func_getpgrp_1=yes else @@ -8180,7 +8724,7 @@ rm -f conftest.$ac_objext conftest.$ac_ext # Use it with no arg. cat >conftest.$ac_ext <<_ACEOF -#line 8183 "configure" +#line 8727 "configure" #include "confdefs.h" $ac_includes_default int @@ -8192,16 +8736,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:8195: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:8739: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:8198: \$? = $ac_status" >&5 + echo "$as_me:8742: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:8201: \"$ac_try\"") >&5 + { (eval echo "$as_me:8745: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:8204: \$? = $ac_status" >&5 + echo "$as_me:8748: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_func_getpgrp_0=yes else @@ -8215,12 +8759,12 @@ yes:no) ac_cv_func_getpgrp_void=yes;; no:yes) ac_cv_func_getpgrp_void=false;; *) if test "$cross_compiling" = yes; then - { { echo "$as_me:8218: error: cannot check getpgrp if cross compiling" >&5 + { { echo "$as_me:8762: error: cannot check getpgrp if cross compiling" >&5 echo "$as_me: error: cannot check getpgrp if cross compiling" >&2;} { (exit 1); exit 1; }; } else cat >conftest.$ac_ext <<_ACEOF -#line 8223 "configure" +#line 8767 "configure" #include "confdefs.h" $ac_includes_default @@ -8274,15 +8818,15 @@ _ACEOF rm -f conftest$ac_exeext -if { (eval echo "$as_me:8277: \"$ac_link\"") >&5 +if { (eval echo "$as_me:8821: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:8280: \$? = $ac_status" >&5 + echo "$as_me:8824: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='./conftest$ac_exeext' - { (eval echo "$as_me:8282: \"$ac_try\"") >&5 + { (eval echo "$as_me:8826: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:8285: \$? = $ac_status" >&5 + echo "$as_me:8829: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_func_getpgrp_void=yes else @@ -8296,7 +8840,7 @@ esac # $ac_func_getpgrp_0:$ac_func_getpgrp_1 fi -echo "$as_me:8299: result: $ac_cv_func_getpgrp_void" >&5 +echo "$as_me:8843: result: $ac_cv_func_getpgrp_void" >&5 echo "${ECHO_T}$ac_cv_func_getpgrp_void" >&6 if test $ac_cv_func_getpgrp_void = yes; then @@ -8314,13 +8858,14 @@ withval="$with_pam" if test "x$withval" != "xno" ; then - if test "x$ac_cv_header_security_pam_appl_h" != "xyes" ; then - { { echo "$as_me:8318: error: PAM headers not found" >&5 + if test "x$ac_cv_header_security_pam_appl_h" != "xyes" && \ + test "x$ac_cv_header_pam_pam_appl_h" != "xyes" ; then + { { echo "$as_me:8863: error: PAM headers not found" >&5 echo "$as_me: error: PAM headers not found" >&2;} { (exit 1); exit 1; }; } fi -echo "$as_me:8323: checking for dlopen in -ldl" >&5 +echo "$as_me:8868: checking for dlopen in -ldl" >&5 echo $ECHO_N "checking for dlopen in -ldl... $ECHO_C" >&6 if test "${ac_cv_lib_dl_dlopen+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -8328,7 +8873,7 @@ ac_check_lib_save_LIBS=$LIBS LIBS="-ldl $LIBS" cat >conftest.$ac_ext <<_ACEOF -#line 8331 "configure" +#line 8876 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -8347,16 +8892,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:8350: \"$ac_link\"") >&5 +if { (eval echo "$as_me:8895: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:8353: \$? = $ac_status" >&5 + echo "$as_me:8898: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:8356: \"$ac_try\"") >&5 + { (eval echo "$as_me:8901: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:8359: \$? = $ac_status" >&5 + echo "$as_me:8904: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_lib_dl_dlopen=yes else @@ -8367,7 +8912,7 @@ rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi -echo "$as_me:8370: result: $ac_cv_lib_dl_dlopen" >&5 +echo "$as_me:8915: result: $ac_cv_lib_dl_dlopen" >&5 echo "${ECHO_T}$ac_cv_lib_dl_dlopen" >&6 if test $ac_cv_lib_dl_dlopen = yes; then cat >>confdefs.h <&5 +echo "$as_me:8926: checking for pam_set_item in -lpam" >&5 echo $ECHO_N "checking for pam_set_item in -lpam... $ECHO_C" >&6 if test "${ac_cv_lib_pam_pam_set_item+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -8386,7 +8931,7 @@ ac_check_lib_save_LIBS=$LIBS LIBS="-lpam $LIBS" cat >conftest.$ac_ext <<_ACEOF -#line 8389 "configure" +#line 8934 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -8405,16 +8950,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:8408: \"$ac_link\"") >&5 +if { (eval echo "$as_me:8953: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:8411: \$? = $ac_status" >&5 + echo "$as_me:8956: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:8414: \"$ac_try\"") >&5 + { (eval echo "$as_me:8959: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:8417: \$? = $ac_status" >&5 + echo "$as_me:8962: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_lib_pam_pam_set_item=yes else @@ -8425,7 +8970,7 @@ rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi -echo "$as_me:8428: result: $ac_cv_lib_pam_pam_set_item" >&5 +echo "$as_me:8973: result: $ac_cv_lib_pam_pam_set_item" >&5 echo "${ECHO_T}$ac_cv_lib_pam_pam_set_item" >&6 if test $ac_cv_lib_pam_pam_set_item = yes; then cat >>confdefs.h <&5 + { { echo "$as_me:8983: error: *** libpam missing" >&5 echo "$as_me: error: *** libpam missing" >&2;} { (exit 1); exit 1; }; } fi @@ -8443,13 +8988,13 @@ for ac_func in pam_getenvlist do as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh` -echo "$as_me:8446: checking for $ac_func" >&5 +echo "$as_me:8991: checking for $ac_func" >&5 echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6 if eval "test \"\${$as_ac_var+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 8452 "configure" +#line 8997 "configure" #include "confdefs.h" /* System header to define __stub macros and hopefully few prototypes, which can conflict with char $ac_func (); below. */ @@ -8480,16 +9025,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:8483: \"$ac_link\"") >&5 +if { (eval echo "$as_me:9028: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:8486: \$? = $ac_status" >&5 + echo "$as_me:9031: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:8489: \"$ac_try\"") >&5 + { (eval echo "$as_me:9034: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:8492: \$? = $ac_status" >&5 + echo "$as_me:9037: \$? = $ac_status" >&5 (exit $ac_status); }; }; then eval "$as_ac_var=yes" else @@ -8499,7 +9044,7 @@ fi rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:8502: result: `eval echo '${'$as_ac_var'}'`" >&5 +echo "$as_me:9047: result: `eval echo '${'$as_ac_var'}'`" >&5 echo "${ECHO_T}`eval echo '${'$as_ac_var'}'`" >&6 if test `eval echo '${'$as_ac_var'}'` = yes; then cat >>confdefs.h <&5 +echo "$as_me:9060: checking for $ac_func" >&5 echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6 if eval "test \"\${$as_ac_var+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 8521 "configure" +#line 9066 "configure" #include "confdefs.h" /* System header to define __stub macros and hopefully few prototypes, which can conflict with char $ac_func (); below. */ @@ -8549,16 +9094,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:8552: \"$ac_link\"") >&5 +if { (eval echo "$as_me:9097: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:8555: \$? = $ac_status" >&5 + echo "$as_me:9100: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:8558: \"$ac_try\"") >&5 + { (eval echo "$as_me:9103: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:8561: \$? = $ac_status" >&5 + echo "$as_me:9106: \$? = $ac_status" >&5 (exit $ac_status); }; }; then eval "$as_ac_var=yes" else @@ -8568,7 +9113,7 @@ fi rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:8571: result: `eval echo '${'$as_ac_var'}'`" >&5 +echo "$as_me:9116: result: `eval echo '${'$as_ac_var'}'`" >&5 echo "${ECHO_T}`eval echo '${'$as_ac_var'}'`" >&6 if test `eval echo '${'$as_ac_var'}'` = yes; then cat >>confdefs.h <>confdefs.h <<\EOF @@ -8598,14 +9142,18 @@ # Check for older PAM if test "x$PAM_MSG" = "xyes" ; then # Check PAM strerror arguments (old PAM) - echo "$as_me:8601: checking whether pam_strerror takes only one argument" >&5 + echo "$as_me:9145: checking whether pam_strerror takes only one argument" >&5 echo $ECHO_N "checking whether pam_strerror takes only one argument... $ECHO_C" >&6 cat >conftest.$ac_ext <<_ACEOF -#line 8604 "configure" +#line 9148 "configure" #include "confdefs.h" #include +#if defined(HAVE_SECURITY_PAM_APPL_H) #include +#elif defined (HAVE_PAM_PAM_APPL_H) +#include +#endif int main () @@ -8616,18 +9164,18 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:8619: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:9167: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:8622: \$? = $ac_status" >&5 + echo "$as_me:9170: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:8625: \"$ac_try\"") >&5 + { (eval echo "$as_me:9173: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:8628: \$? = $ac_status" >&5 + echo "$as_me:9176: \$? = $ac_status" >&5 (exit $ac_status); }; }; then - echo "$as_me:8630: result: no" >&5 + echo "$as_me:9178: result: no" >&5 echo "${ECHO_T}no" >&6 else echo "$as_me: failed program was:" >&5 @@ -8637,7 +9185,7 @@ #define HAVE_OLD_PAM 1 EOF - echo "$as_me:8640: result: yes" >&5 + echo "$as_me:9188: result: yes" >&5 echo "${ECHO_T}yes" >&6 PAM_MSG="yes (old library)" @@ -8645,70 +9193,6 @@ rm -f conftest.$ac_objext conftest.$ac_ext fi -# Some systems want crypt() from libcrypt, *not* the version in OpenSSL, -# because the system crypt() is more featureful. -if test "x$check_for_libcrypt_before" = "x1"; then - -echo "$as_me:8652: checking for crypt in -lcrypt" >&5 -echo $ECHO_N "checking for crypt in -lcrypt... $ECHO_C" >&6 -if test "${ac_cv_lib_crypt_crypt+set}" = set; then - echo $ECHO_N "(cached) $ECHO_C" >&6 -else - ac_check_lib_save_LIBS=$LIBS -LIBS="-lcrypt $LIBS" -cat >conftest.$ac_ext <<_ACEOF -#line 8660 "configure" -#include "confdefs.h" - -/* Override any gcc2 internal prototype to avoid an error. */ -#ifdef __cplusplus -extern "C" -#endif -/* We use char because int might match the return type of a gcc2 - builtin and then its argument prototype would still apply. */ -char crypt (); -int -main () -{ -crypt (); - ; - return 0; -} -_ACEOF -rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:8679: \"$ac_link\"") >&5 - (eval $ac_link) 2>&5 - ac_status=$? - echo "$as_me:8682: \$? = $ac_status" >&5 - (exit $ac_status); } && - { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:8685: \"$ac_try\"") >&5 - (eval $ac_try) 2>&5 - ac_status=$? - echo "$as_me:8688: \$? = $ac_status" >&5 - (exit $ac_status); }; }; then - ac_cv_lib_crypt_crypt=yes -else - echo "$as_me: failed program was:" >&5 -cat conftest.$ac_ext >&5 -ac_cv_lib_crypt_crypt=no -fi -rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext -LIBS=$ac_check_lib_save_LIBS -fi -echo "$as_me:8699: result: $ac_cv_lib_crypt_crypt" >&5 -echo "${ECHO_T}$ac_cv_lib_crypt_crypt" >&6 -if test $ac_cv_lib_crypt_crypt = yes; then - cat >>confdefs.h <conftest.$ac_ext <<_ACEOF -#line 8744 "configure" +#line 9228 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -8760,16 +9244,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:8763: \"$ac_link\"") >&5 +if { (eval echo "$as_me:9247: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:8766: \$? = $ac_status" >&5 + echo "$as_me:9250: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:8769: \"$ac_try\"") >&5 + { (eval echo "$as_me:9253: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:8772: \$? = $ac_status" >&5 + echo "$as_me:9256: \$? = $ac_status" >&5 (exit $ac_status); }; }; then cat >>confdefs.h <<\EOF #define HAVE_OPENSSL 1 @@ -8786,7 +9270,7 @@ fi CPPFLAGS="-I/usr/local/ssl/include ${saved_CPPFLAGS}" cat >conftest.$ac_ext <<_ACEOF -#line 8789 "configure" +#line 9273 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -8805,16 +9289,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:8808: \"$ac_link\"") >&5 +if { (eval echo "$as_me:9292: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:8811: \$? = $ac_status" >&5 + echo "$as_me:9295: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:8814: \"$ac_try\"") >&5 + { (eval echo "$as_me:9298: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:8817: \$? = $ac_status" >&5 + echo "$as_me:9301: \$? = $ac_status" >&5 (exit $ac_status); }; }; then cat >>confdefs.h <<\EOF #define HAVE_OPENSSL 1 @@ -8824,7 +9308,7 @@ echo "$as_me: failed program was:" >&5 cat conftest.$ac_ext >&5 - { { echo "$as_me:8827: error: *** Can't find recent OpenSSL libcrypto (see config.log for details) ***" >&5 + { { echo "$as_me:9311: error: *** Can't find recent OpenSSL libcrypto (see config.log for details) ***" >&5 echo "$as_me: error: *** Can't find recent OpenSSL libcrypto (see config.log for details) ***" >&2;} { (exit 1); exit 1; }; } @@ -8835,15 +9319,15 @@ rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext # Determine OpenSSL header version -echo "$as_me:8838: checking OpenSSL header version" >&5 +echo "$as_me:9322: checking OpenSSL header version" >&5 echo $ECHO_N "checking OpenSSL header version... $ECHO_C" >&6 if test "$cross_compiling" = yes; then - { { echo "$as_me:8841: error: cannot run test program while cross compiling" >&5 + { { echo "$as_me:9325: error: cannot run test program while cross compiling" >&5 echo "$as_me: error: cannot run test program while cross compiling" >&2;} { (exit 1); exit 1; }; } else cat >conftest.$ac_ext <<_ACEOF -#line 8846 "configure" +#line 9330 "configure" #include "confdefs.h" #include @@ -8851,12 +9335,12 @@ #include #define DATA "conftest.sslincver" int main(void) { - FILE *fd; - int rc; + FILE *fd; + int rc; - fd = fopen(DATA,"w"); - if(fd == NULL) - exit(1); + fd = fopen(DATA,"w"); + if(fd == NULL) + exit(1); if ((rc = fprintf(fd ,"%x (%s)\n", OPENSSL_VERSION_NUMBER, OPENSSL_VERSION_TEXT)) <0) exit(1); @@ -8866,19 +9350,19 @@ _ACEOF rm -f conftest$ac_exeext -if { (eval echo "$as_me:8869: \"$ac_link\"") >&5 +if { (eval echo "$as_me:9353: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:8872: \$? = $ac_status" >&5 + echo "$as_me:9356: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='./conftest$ac_exeext' - { (eval echo "$as_me:8874: \"$ac_try\"") >&5 + { (eval echo "$as_me:9358: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:8877: \$? = $ac_status" >&5 + echo "$as_me:9361: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ssl_header_ver=`cat conftest.sslincver` - echo "$as_me:8881: result: $ssl_header_ver" >&5 + echo "$as_me:9365: result: $ssl_header_ver" >&5 echo "${ECHO_T}$ssl_header_ver" >&6 else @@ -8886,9 +9370,9 @@ echo "$as_me: failed program was:" >&5 cat conftest.$ac_ext >&5 - echo "$as_me:8889: result: not found" >&5 + echo "$as_me:9373: result: not found" >&5 echo "${ECHO_T}not found" >&6 - { { echo "$as_me:8891: error: OpenSSL version header not found." >&5 + { { echo "$as_me:9375: error: OpenSSL version header not found." >&5 echo "$as_me: error: OpenSSL version header not found." >&2;} { (exit 1); exit 1; }; } @@ -8897,15 +9381,15 @@ fi # Determine OpenSSL library version -echo "$as_me:8900: checking OpenSSL library version" >&5 +echo "$as_me:9384: checking OpenSSL library version" >&5 echo $ECHO_N "checking OpenSSL library version... $ECHO_C" >&6 if test "$cross_compiling" = yes; then - { { echo "$as_me:8903: error: cannot run test program while cross compiling" >&5 + { { echo "$as_me:9387: error: cannot run test program while cross compiling" >&5 echo "$as_me: error: cannot run test program while cross compiling" >&2;} { (exit 1); exit 1; }; } else cat >conftest.$ac_ext <<_ACEOF -#line 8908 "configure" +#line 9392 "configure" #include "confdefs.h" #include @@ -8914,12 +9398,12 @@ #include #define DATA "conftest.ssllibver" int main(void) { - FILE *fd; - int rc; + FILE *fd; + int rc; - fd = fopen(DATA,"w"); - if(fd == NULL) - exit(1); + fd = fopen(DATA,"w"); + if(fd == NULL) + exit(1); if ((rc = fprintf(fd ,"%x (%s)\n", SSLeay(), SSLeay_version(SSLEAY_VERSION))) <0) exit(1); @@ -8929,19 +9413,19 @@ _ACEOF rm -f conftest$ac_exeext -if { (eval echo "$as_me:8932: \"$ac_link\"") >&5 +if { (eval echo "$as_me:9416: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:8935: \$? = $ac_status" >&5 + echo "$as_me:9419: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='./conftest$ac_exeext' - { (eval echo "$as_me:8937: \"$ac_try\"") >&5 + { (eval echo "$as_me:9421: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:8940: \$? = $ac_status" >&5 + echo "$as_me:9424: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ssl_library_ver=`cat conftest.ssllibver` - echo "$as_me:8944: result: $ssl_library_ver" >&5 + echo "$as_me:9428: result: $ssl_library_ver" >&5 echo "${ECHO_T}$ssl_library_ver" >&6 else @@ -8949,9 +9433,9 @@ echo "$as_me: failed program was:" >&5 cat conftest.$ac_ext >&5 - echo "$as_me:8952: result: not found" >&5 + echo "$as_me:9436: result: not found" >&5 echo "${ECHO_T}not found" >&6 - { { echo "$as_me:8954: error: OpenSSL library not found." >&5 + { { echo "$as_me:9438: error: OpenSSL library not found." >&5 echo "$as_me: error: OpenSSL library not found." >&2;} { (exit 1); exit 1; }; } @@ -8960,15 +9444,15 @@ fi # Sanity check OpenSSL headers -echo "$as_me:8963: checking whether OpenSSL's headers match the library" >&5 +echo "$as_me:9447: checking whether OpenSSL's headers match the library" >&5 echo $ECHO_N "checking whether OpenSSL's headers match the library... $ECHO_C" >&6 if test "$cross_compiling" = yes; then - { { echo "$as_me:8966: error: cannot run test program while cross compiling" >&5 + { { echo "$as_me:9450: error: cannot run test program while cross compiling" >&5 echo "$as_me: error: cannot run test program while cross compiling" >&2;} { (exit 1); exit 1; }; } else cat >conftest.$ac_ext <<_ACEOF -#line 8971 "configure" +#line 9455 "configure" #include "confdefs.h" #include @@ -8977,18 +9461,18 @@ _ACEOF rm -f conftest$ac_exeext -if { (eval echo "$as_me:8980: \"$ac_link\"") >&5 +if { (eval echo "$as_me:9464: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:8983: \$? = $ac_status" >&5 + echo "$as_me:9467: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='./conftest$ac_exeext' - { (eval echo "$as_me:8985: \"$ac_try\"") >&5 + { (eval echo "$as_me:9469: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:8988: \$? = $ac_status" >&5 + echo "$as_me:9472: \$? = $ac_status" >&5 (exit $ac_status); }; }; then - echo "$as_me:8991: result: yes" >&5 + echo "$as_me:9475: result: yes" >&5 echo "${ECHO_T}yes" >&6 else @@ -8996,9 +9480,9 @@ echo "$as_me: failed program was:" >&5 cat conftest.$ac_ext >&5 - echo "$as_me:8999: result: no" >&5 + echo "$as_me:9483: result: no" >&5 echo "${ECHO_T}no" >&6 - { { echo "$as_me:9001: error: Your OpenSSL headers do not match your library. + { { echo "$as_me:9485: error: Your OpenSSL headers do not match your library. Check config.log for details. Also see contrib/findssl.sh for help identifying header/library mismatches." >&5 echo "$as_me: error: Your OpenSSL headers do not match your library. @@ -9010,10 +9494,74 @@ rm -f core core.* *.core conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext fi +# Some systems want crypt() from libcrypt, *not* the version in OpenSSL, +# because the system crypt() is more featureful. +if test "x$check_for_libcrypt_before" = "x1"; then + +echo "$as_me:9501: checking for crypt in -lcrypt" >&5 +echo $ECHO_N "checking for crypt in -lcrypt... $ECHO_C" >&6 +if test "${ac_cv_lib_crypt_crypt+set}" = set; then + echo $ECHO_N "(cached) $ECHO_C" >&6 +else + ac_check_lib_save_LIBS=$LIBS +LIBS="-lcrypt $LIBS" +cat >conftest.$ac_ext <<_ACEOF +#line 9509 "configure" +#include "confdefs.h" + +/* Override any gcc2 internal prototype to avoid an error. */ +#ifdef __cplusplus +extern "C" +#endif +/* We use char because int might match the return type of a gcc2 + builtin and then its argument prototype would still apply. */ +char crypt (); +int +main () +{ +crypt (); + ; + return 0; +} +_ACEOF +rm -f conftest.$ac_objext conftest$ac_exeext +if { (eval echo "$as_me:9528: \"$ac_link\"") >&5 + (eval $ac_link) 2>&5 + ac_status=$? + echo "$as_me:9531: \$? = $ac_status" >&5 + (exit $ac_status); } && + { ac_try='test -s conftest$ac_exeext' + { (eval echo "$as_me:9534: \"$ac_try\"") >&5 + (eval $ac_try) 2>&5 + ac_status=$? + echo "$as_me:9537: \$? = $ac_status" >&5 + (exit $ac_status); }; }; then + ac_cv_lib_crypt_crypt=yes +else + echo "$as_me: failed program was:" >&5 +cat conftest.$ac_ext >&5 +ac_cv_lib_crypt_crypt=no +fi +rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext +LIBS=$ac_check_lib_save_LIBS +fi +echo "$as_me:9548: result: $ac_cv_lib_crypt_crypt" >&5 +echo "${ECHO_T}$ac_cv_lib_crypt_crypt" >&6 +if test $ac_cv_lib_crypt_crypt = yes; then + cat >>confdefs.h <&5 + echo "$as_me:9564: checking for crypt in -lcrypt" >&5 echo $ECHO_N "checking for crypt in -lcrypt... $ECHO_C" >&6 if test "${ac_cv_lib_crypt_crypt+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -9021,7 +9569,7 @@ ac_check_lib_save_LIBS=$LIBS LIBS="-lcrypt $LIBS" cat >conftest.$ac_ext <<_ACEOF -#line 9024 "configure" +#line 9572 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -9040,16 +9588,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:9043: \"$ac_link\"") >&5 +if { (eval echo "$as_me:9591: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:9046: \$? = $ac_status" >&5 + echo "$as_me:9594: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:9049: \"$ac_try\"") >&5 + { (eval echo "$as_me:9597: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:9052: \$? = $ac_status" >&5 + echo "$as_me:9600: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_lib_crypt_crypt=yes else @@ -9060,7 +9608,7 @@ rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi -echo "$as_me:9063: result: $ac_cv_lib_crypt_crypt" >&5 +echo "$as_me:9611: result: $ac_cv_lib_crypt_crypt" >&5 echo "${ECHO_T}$ac_cv_lib_crypt_crypt" >&6 if test $ac_cv_lib_crypt_crypt = yes; then LIBS="$LIBS -lcrypt" @@ -9071,15 +9619,15 @@ ### Configure cryptographic random number support # Check wheter OpenSSL seeds itself -echo "$as_me:9074: checking whether OpenSSL's PRNG is internally seeded" >&5 +echo "$as_me:9622: checking whether OpenSSL's PRNG is internally seeded" >&5 echo $ECHO_N "checking whether OpenSSL's PRNG is internally seeded... $ECHO_C" >&6 if test "$cross_compiling" = yes; then - { { echo "$as_me:9077: error: cannot run test program while cross compiling" >&5 + { { echo "$as_me:9625: error: cannot run test program while cross compiling" >&5 echo "$as_me: error: cannot run test program while cross compiling" >&2;} { (exit 1); exit 1; }; } else cat >conftest.$ac_ext <<_ACEOF -#line 9082 "configure" +#line 9630 "configure" #include "confdefs.h" #include @@ -9088,19 +9636,19 @@ _ACEOF rm -f conftest$ac_exeext -if { (eval echo "$as_me:9091: \"$ac_link\"") >&5 +if { (eval echo "$as_me:9639: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:9094: \$? = $ac_status" >&5 + echo "$as_me:9642: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='./conftest$ac_exeext' - { (eval echo "$as_me:9096: \"$ac_try\"") >&5 + { (eval echo "$as_me:9644: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:9099: \$? = $ac_status" >&5 + echo "$as_me:9647: \$? = $ac_status" >&5 (exit $ac_status); }; }; then OPENSSL_SEEDS_ITSELF=yes - echo "$as_me:9103: result: yes" >&5 + echo "$as_me:9651: result: yes" >&5 echo "${ECHO_T}yes" >&6 else @@ -9108,7 +9656,7 @@ echo "$as_me: failed program was:" >&5 cat conftest.$ac_ext >&5 - echo "$as_me:9111: result: no" >&5 + echo "$as_me:9659: result: no" >&5 echo "${ECHO_T}no" >&6 # Default to use of the rand helper if OpenSSL doesn't # seed itself @@ -9128,7 +9676,7 @@ # Force use of OpenSSL's internal RNG, even if # the previous test showed it to be unseeded. if test -z "$OPENSSL_SEEDS_ITSELF" ; then - { echo "$as_me:9131: WARNING: *** Forcing use of OpenSSL's non-self-seeding PRNG" >&5 + { echo "$as_me:9679: WARNING: *** Forcing use of OpenSSL's non-self-seeding PRNG" >&5 echo "$as_me: WARNING: *** Forcing use of OpenSSL's non-self-seeding PRNG" >&2;} OPENSSL_SEEDS_ITSELF=yes USE_RAND_HELPER="" @@ -9169,7 +9717,7 @@ [0-9]*) ;; *) - { { echo "$as_me:9172: error: You must specify a numeric port number for --with-prngd-port" >&5 + { { echo "$as_me:9720: error: You must specify a numeric port number for --with-prngd-port" >&5 echo "$as_me: error: You must specify a numeric port number for --with-prngd-port" >&2;} { (exit 1); exit 1; }; } ;; @@ -9200,7 +9748,7 @@ /*) ;; *) - { { echo "$as_me:9203: error: You must specify an absolute path to the entropy socket" >&5 + { { echo "$as_me:9751: error: You must specify an absolute path to the entropy socket" >&5 echo "$as_me: error: You must specify an absolute path to the entropy socket" >&2;} { (exit 1); exit 1; }; } ;; @@ -9208,12 +9756,12 @@ if test ! -z "$withval" ; then if test ! -z "$PRNGD_PORT" ; then - { { echo "$as_me:9211: error: You may not specify both a PRNGD/EGD port and socket" >&5 + { { echo "$as_me:9759: error: You may not specify both a PRNGD/EGD port and socket" >&5 echo "$as_me: error: You may not specify both a PRNGD/EGD port and socket" >&2;} { (exit 1); exit 1; }; } fi if test ! -r "$withval" ; then - { echo "$as_me:9216: WARNING: Entropy socket is not readable" >&5 + { echo "$as_me:9764: WARNING: Entropy socket is not readable" >&5 echo "$as_me: WARNING: Entropy socket is not readable" >&2;} fi PRNGD_SOCKET="$withval" @@ -9227,7 +9775,7 @@ # Check for existing socket only if we don't have a random device already if test "$USE_RAND_HELPER" = yes ; then - echo "$as_me:9230: checking for PRNGD/EGD socket" >&5 + echo "$as_me:9778: checking for PRNGD/EGD socket" >&5 echo $ECHO_N "checking for PRNGD/EGD socket... $ECHO_C" >&6 # Insert other locations here for sock in /var/run/egd-pool /dev/egd-pool /etc/entropy; do @@ -9241,10 +9789,10 @@ fi done if test ! -z "$PRNGD_SOCKET" ; then - echo "$as_me:9244: result: $PRNGD_SOCKET" >&5 + echo "$as_me:9792: result: $PRNGD_SOCKET" >&5 echo "${ECHO_T}$PRNGD_SOCKET" >&6 else - echo "$as_me:9247: result: not found" >&5 + echo "$as_me:9795: result: not found" >&5 echo "${ECHO_T}not found" >&6 fi fi @@ -9300,7 +9848,7 @@ # Extract the first word of "ls", so it can be a program name with args. set dummy ls; ac_word=$2 -echo "$as_me:9303: checking for $ac_word" >&5 +echo "$as_me:9851: checking for $ac_word" >&5 echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 if test "${ac_cv_path_PROG_LS+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -9317,7 +9865,7 @@ test -z "$ac_dir" && ac_dir=. if $as_executable_p "$ac_dir/$ac_word"; then ac_cv_path_PROG_LS="$ac_dir/$ac_word" - echo "$as_me:9320: found $ac_dir/$ac_word" >&5 + echo "$as_me:9868: found $ac_dir/$ac_word" >&5 break fi done @@ -9328,10 +9876,10 @@ PROG_LS=$ac_cv_path_PROG_LS if test -n "$PROG_LS"; then - echo "$as_me:9331: result: $PROG_LS" >&5 + echo "$as_me:9879: result: $PROG_LS" >&5 echo "${ECHO_T}$PROG_LS" >&6 else - echo "$as_me:9334: result: no" >&5 + echo "$as_me:9882: result: no" >&5 echo "${ECHO_T}no" >&6 fi @@ -9341,7 +9889,7 @@ # Extract the first word of "netstat", so it can be a program name with args. set dummy netstat; ac_word=$2 -echo "$as_me:9344: checking for $ac_word" >&5 +echo "$as_me:9892: checking for $ac_word" >&5 echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 if test "${ac_cv_path_PROG_NETSTAT+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -9358,7 +9906,7 @@ test -z "$ac_dir" && ac_dir=. if $as_executable_p "$ac_dir/$ac_word"; then ac_cv_path_PROG_NETSTAT="$ac_dir/$ac_word" - echo "$as_me:9361: found $ac_dir/$ac_word" >&5 + echo "$as_me:9909: found $ac_dir/$ac_word" >&5 break fi done @@ -9369,10 +9917,10 @@ PROG_NETSTAT=$ac_cv_path_PROG_NETSTAT if test -n "$PROG_NETSTAT"; then - echo "$as_me:9372: result: $PROG_NETSTAT" >&5 + echo "$as_me:9920: result: $PROG_NETSTAT" >&5 echo "${ECHO_T}$PROG_NETSTAT" >&6 else - echo "$as_me:9375: result: no" >&5 + echo "$as_me:9923: result: no" >&5 echo "${ECHO_T}no" >&6 fi @@ -9382,7 +9930,7 @@ # Extract the first word of "arp", so it can be a program name with args. set dummy arp; ac_word=$2 -echo "$as_me:9385: checking for $ac_word" >&5 +echo "$as_me:9933: checking for $ac_word" >&5 echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 if test "${ac_cv_path_PROG_ARP+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -9399,7 +9947,7 @@ test -z "$ac_dir" && ac_dir=. if $as_executable_p "$ac_dir/$ac_word"; then ac_cv_path_PROG_ARP="$ac_dir/$ac_word" - echo "$as_me:9402: found $ac_dir/$ac_word" >&5 + echo "$as_me:9950: found $ac_dir/$ac_word" >&5 break fi done @@ -9410,10 +9958,10 @@ PROG_ARP=$ac_cv_path_PROG_ARP if test -n "$PROG_ARP"; then - echo "$as_me:9413: result: $PROG_ARP" >&5 + echo "$as_me:9961: result: $PROG_ARP" >&5 echo "${ECHO_T}$PROG_ARP" >&6 else - echo "$as_me:9416: result: no" >&5 + echo "$as_me:9964: result: no" >&5 echo "${ECHO_T}no" >&6 fi @@ -9423,7 +9971,7 @@ # Extract the first word of "ifconfig", so it can be a program name with args. set dummy ifconfig; ac_word=$2 -echo "$as_me:9426: checking for $ac_word" >&5 +echo "$as_me:9974: checking for $ac_word" >&5 echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 if test "${ac_cv_path_PROG_IFCONFIG+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -9440,7 +9988,7 @@ test -z "$ac_dir" && ac_dir=. if $as_executable_p "$ac_dir/$ac_word"; then ac_cv_path_PROG_IFCONFIG="$ac_dir/$ac_word" - echo "$as_me:9443: found $ac_dir/$ac_word" >&5 + echo "$as_me:9991: found $ac_dir/$ac_word" >&5 break fi done @@ -9451,10 +9999,10 @@ PROG_IFCONFIG=$ac_cv_path_PROG_IFCONFIG if test -n "$PROG_IFCONFIG"; then - echo "$as_me:9454: result: $PROG_IFCONFIG" >&5 + echo "$as_me:10002: result: $PROG_IFCONFIG" >&5 echo "${ECHO_T}$PROG_IFCONFIG" >&6 else - echo "$as_me:9457: result: no" >&5 + echo "$as_me:10005: result: no" >&5 echo "${ECHO_T}no" >&6 fi @@ -9464,7 +10012,7 @@ # Extract the first word of "jstat", so it can be a program name with args. set dummy jstat; ac_word=$2 -echo "$as_me:9467: checking for $ac_word" >&5 +echo "$as_me:10015: checking for $ac_word" >&5 echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 if test "${ac_cv_path_PROG_JSTAT+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -9481,7 +10029,7 @@ test -z "$ac_dir" && ac_dir=. if $as_executable_p "$ac_dir/$ac_word"; then ac_cv_path_PROG_JSTAT="$ac_dir/$ac_word" - echo "$as_me:9484: found $ac_dir/$ac_word" >&5 + echo "$as_me:10032: found $ac_dir/$ac_word" >&5 break fi done @@ -9492,10 +10040,10 @@ PROG_JSTAT=$ac_cv_path_PROG_JSTAT if test -n "$PROG_JSTAT"; then - echo "$as_me:9495: result: $PROG_JSTAT" >&5 + echo "$as_me:10043: result: $PROG_JSTAT" >&5 echo "${ECHO_T}$PROG_JSTAT" >&6 else - echo "$as_me:9498: result: no" >&5 + echo "$as_me:10046: result: no" >&5 echo "${ECHO_T}no" >&6 fi @@ -9505,7 +10053,7 @@ # Extract the first word of "ps", so it can be a program name with args. set dummy ps; ac_word=$2 -echo "$as_me:9508: checking for $ac_word" >&5 +echo "$as_me:10056: checking for $ac_word" >&5 echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 if test "${ac_cv_path_PROG_PS+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -9522,7 +10070,7 @@ test -z "$ac_dir" && ac_dir=. if $as_executable_p "$ac_dir/$ac_word"; then ac_cv_path_PROG_PS="$ac_dir/$ac_word" - echo "$as_me:9525: found $ac_dir/$ac_word" >&5 + echo "$as_me:10073: found $ac_dir/$ac_word" >&5 break fi done @@ -9533,10 +10081,10 @@ PROG_PS=$ac_cv_path_PROG_PS if test -n "$PROG_PS"; then - echo "$as_me:9536: result: $PROG_PS" >&5 + echo "$as_me:10084: result: $PROG_PS" >&5 echo "${ECHO_T}$PROG_PS" >&6 else - echo "$as_me:9539: result: no" >&5 + echo "$as_me:10087: result: no" >&5 echo "${ECHO_T}no" >&6 fi @@ -9546,7 +10094,7 @@ # Extract the first word of "sar", so it can be a program name with args. set dummy sar; ac_word=$2 -echo "$as_me:9549: checking for $ac_word" >&5 +echo "$as_me:10097: checking for $ac_word" >&5 echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 if test "${ac_cv_path_PROG_SAR+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -9563,7 +10111,7 @@ test -z "$ac_dir" && ac_dir=. if $as_executable_p "$ac_dir/$ac_word"; then ac_cv_path_PROG_SAR="$ac_dir/$ac_word" - echo "$as_me:9566: found $ac_dir/$ac_word" >&5 + echo "$as_me:10114: found $ac_dir/$ac_word" >&5 break fi done @@ -9574,10 +10122,10 @@ PROG_SAR=$ac_cv_path_PROG_SAR if test -n "$PROG_SAR"; then - echo "$as_me:9577: result: $PROG_SAR" >&5 + echo "$as_me:10125: result: $PROG_SAR" >&5 echo "${ECHO_T}$PROG_SAR" >&6 else - echo "$as_me:9580: result: no" >&5 + echo "$as_me:10128: result: no" >&5 echo "${ECHO_T}no" >&6 fi @@ -9587,7 +10135,7 @@ # Extract the first word of "w", so it can be a program name with args. set dummy w; ac_word=$2 -echo "$as_me:9590: checking for $ac_word" >&5 +echo "$as_me:10138: checking for $ac_word" >&5 echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 if test "${ac_cv_path_PROG_W+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -9604,7 +10152,7 @@ test -z "$ac_dir" && ac_dir=. if $as_executable_p "$ac_dir/$ac_word"; then ac_cv_path_PROG_W="$ac_dir/$ac_word" - echo "$as_me:9607: found $ac_dir/$ac_word" >&5 + echo "$as_me:10155: found $ac_dir/$ac_word" >&5 break fi done @@ -9615,10 +10163,10 @@ PROG_W=$ac_cv_path_PROG_W if test -n "$PROG_W"; then - echo "$as_me:9618: result: $PROG_W" >&5 + echo "$as_me:10166: result: $PROG_W" >&5 echo "${ECHO_T}$PROG_W" >&6 else - echo "$as_me:9621: result: no" >&5 + echo "$as_me:10169: result: no" >&5 echo "${ECHO_T}no" >&6 fi @@ -9628,7 +10176,7 @@ # Extract the first word of "who", so it can be a program name with args. set dummy who; ac_word=$2 -echo "$as_me:9631: checking for $ac_word" >&5 +echo "$as_me:10179: checking for $ac_word" >&5 echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 if test "${ac_cv_path_PROG_WHO+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -9645,7 +10193,7 @@ test -z "$ac_dir" && ac_dir=. if $as_executable_p "$ac_dir/$ac_word"; then ac_cv_path_PROG_WHO="$ac_dir/$ac_word" - echo "$as_me:9648: found $ac_dir/$ac_word" >&5 + echo "$as_me:10196: found $ac_dir/$ac_word" >&5 break fi done @@ -9656,10 +10204,10 @@ PROG_WHO=$ac_cv_path_PROG_WHO if test -n "$PROG_WHO"; then - echo "$as_me:9659: result: $PROG_WHO" >&5 + echo "$as_me:10207: result: $PROG_WHO" >&5 echo "${ECHO_T}$PROG_WHO" >&6 else - echo "$as_me:9662: result: no" >&5 + echo "$as_me:10210: result: no" >&5 echo "${ECHO_T}no" >&6 fi @@ -9669,7 +10217,7 @@ # Extract the first word of "last", so it can be a program name with args. set dummy last; ac_word=$2 -echo "$as_me:9672: checking for $ac_word" >&5 +echo "$as_me:10220: checking for $ac_word" >&5 echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 if test "${ac_cv_path_PROG_LAST+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -9686,7 +10234,7 @@ test -z "$ac_dir" && ac_dir=. if $as_executable_p "$ac_dir/$ac_word"; then ac_cv_path_PROG_LAST="$ac_dir/$ac_word" - echo "$as_me:9689: found $ac_dir/$ac_word" >&5 + echo "$as_me:10237: found $ac_dir/$ac_word" >&5 break fi done @@ -9697,10 +10245,10 @@ PROG_LAST=$ac_cv_path_PROG_LAST if test -n "$PROG_LAST"; then - echo "$as_me:9700: result: $PROG_LAST" >&5 + echo "$as_me:10248: result: $PROG_LAST" >&5 echo "${ECHO_T}$PROG_LAST" >&6 else - echo "$as_me:9703: result: no" >&5 + echo "$as_me:10251: result: no" >&5 echo "${ECHO_T}no" >&6 fi @@ -9710,7 +10258,7 @@ # Extract the first word of "lastlog", so it can be a program name with args. set dummy lastlog; ac_word=$2 -echo "$as_me:9713: checking for $ac_word" >&5 +echo "$as_me:10261: checking for $ac_word" >&5 echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 if test "${ac_cv_path_PROG_LASTLOG+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -9727,7 +10275,7 @@ test -z "$ac_dir" && ac_dir=. if $as_executable_p "$ac_dir/$ac_word"; then ac_cv_path_PROG_LASTLOG="$ac_dir/$ac_word" - echo "$as_me:9730: found $ac_dir/$ac_word" >&5 + echo "$as_me:10278: found $ac_dir/$ac_word" >&5 break fi done @@ -9738,10 +10286,10 @@ PROG_LASTLOG=$ac_cv_path_PROG_LASTLOG if test -n "$PROG_LASTLOG"; then - echo "$as_me:9741: result: $PROG_LASTLOG" >&5 + echo "$as_me:10289: result: $PROG_LASTLOG" >&5 echo "${ECHO_T}$PROG_LASTLOG" >&6 else - echo "$as_me:9744: result: no" >&5 + echo "$as_me:10292: result: no" >&5 echo "${ECHO_T}no" >&6 fi @@ -9751,7 +10299,7 @@ # Extract the first word of "df", so it can be a program name with args. set dummy df; ac_word=$2 -echo "$as_me:9754: checking for $ac_word" >&5 +echo "$as_me:10302: checking for $ac_word" >&5 echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 if test "${ac_cv_path_PROG_DF+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -9768,7 +10316,7 @@ test -z "$ac_dir" && ac_dir=. if $as_executable_p "$ac_dir/$ac_word"; then ac_cv_path_PROG_DF="$ac_dir/$ac_word" - echo "$as_me:9771: found $ac_dir/$ac_word" >&5 + echo "$as_me:10319: found $ac_dir/$ac_word" >&5 break fi done @@ -9779,10 +10327,10 @@ PROG_DF=$ac_cv_path_PROG_DF if test -n "$PROG_DF"; then - echo "$as_me:9782: result: $PROG_DF" >&5 + echo "$as_me:10330: result: $PROG_DF" >&5 echo "${ECHO_T}$PROG_DF" >&6 else - echo "$as_me:9785: result: no" >&5 + echo "$as_me:10333: result: no" >&5 echo "${ECHO_T}no" >&6 fi @@ -9792,7 +10340,7 @@ # Extract the first word of "vmstat", so it can be a program name with args. set dummy vmstat; ac_word=$2 -echo "$as_me:9795: checking for $ac_word" >&5 +echo "$as_me:10343: checking for $ac_word" >&5 echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 if test "${ac_cv_path_PROG_VMSTAT+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -9809,7 +10357,7 @@ test -z "$ac_dir" && ac_dir=. if $as_executable_p "$ac_dir/$ac_word"; then ac_cv_path_PROG_VMSTAT="$ac_dir/$ac_word" - echo "$as_me:9812: found $ac_dir/$ac_word" >&5 + echo "$as_me:10360: found $ac_dir/$ac_word" >&5 break fi done @@ -9820,10 +10368,10 @@ PROG_VMSTAT=$ac_cv_path_PROG_VMSTAT if test -n "$PROG_VMSTAT"; then - echo "$as_me:9823: result: $PROG_VMSTAT" >&5 + echo "$as_me:10371: result: $PROG_VMSTAT" >&5 echo "${ECHO_T}$PROG_VMSTAT" >&6 else - echo "$as_me:9826: result: no" >&5 + echo "$as_me:10374: result: no" >&5 echo "${ECHO_T}no" >&6 fi @@ -9833,7 +10381,7 @@ # Extract the first word of "uptime", so it can be a program name with args. set dummy uptime; ac_word=$2 -echo "$as_me:9836: checking for $ac_word" >&5 +echo "$as_me:10384: checking for $ac_word" >&5 echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 if test "${ac_cv_path_PROG_UPTIME+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -9850,7 +10398,7 @@ test -z "$ac_dir" && ac_dir=. if $as_executable_p "$ac_dir/$ac_word"; then ac_cv_path_PROG_UPTIME="$ac_dir/$ac_word" - echo "$as_me:9853: found $ac_dir/$ac_word" >&5 + echo "$as_me:10401: found $ac_dir/$ac_word" >&5 break fi done @@ -9861,10 +10409,10 @@ PROG_UPTIME=$ac_cv_path_PROG_UPTIME if test -n "$PROG_UPTIME"; then - echo "$as_me:9864: result: $PROG_UPTIME" >&5 + echo "$as_me:10412: result: $PROG_UPTIME" >&5 echo "${ECHO_T}$PROG_UPTIME" >&6 else - echo "$as_me:9867: result: no" >&5 + echo "$as_me:10415: result: no" >&5 echo "${ECHO_T}no" >&6 fi @@ -9874,7 +10422,7 @@ # Extract the first word of "ipcs", so it can be a program name with args. set dummy ipcs; ac_word=$2 -echo "$as_me:9877: checking for $ac_word" >&5 +echo "$as_me:10425: checking for $ac_word" >&5 echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 if test "${ac_cv_path_PROG_IPCS+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -9891,7 +10439,7 @@ test -z "$ac_dir" && ac_dir=. if $as_executable_p "$ac_dir/$ac_word"; then ac_cv_path_PROG_IPCS="$ac_dir/$ac_word" - echo "$as_me:9894: found $ac_dir/$ac_word" >&5 + echo "$as_me:10442: found $ac_dir/$ac_word" >&5 break fi done @@ -9902,10 +10450,10 @@ PROG_IPCS=$ac_cv_path_PROG_IPCS if test -n "$PROG_IPCS"; then - echo "$as_me:9905: result: $PROG_IPCS" >&5 + echo "$as_me:10453: result: $PROG_IPCS" >&5 echo "${ECHO_T}$PROG_IPCS" >&6 else - echo "$as_me:9908: result: no" >&5 + echo "$as_me:10456: result: no" >&5 echo "${ECHO_T}no" >&6 fi @@ -9915,7 +10463,7 @@ # Extract the first word of "tail", so it can be a program name with args. set dummy tail; ac_word=$2 -echo "$as_me:9918: checking for $ac_word" >&5 +echo "$as_me:10466: checking for $ac_word" >&5 echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 if test "${ac_cv_path_PROG_TAIL+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -9932,7 +10480,7 @@ test -z "$ac_dir" && ac_dir=. if $as_executable_p "$ac_dir/$ac_word"; then ac_cv_path_PROG_TAIL="$ac_dir/$ac_word" - echo "$as_me:9935: found $ac_dir/$ac_word" >&5 + echo "$as_me:10483: found $ac_dir/$ac_word" >&5 break fi done @@ -9943,10 +10491,10 @@ PROG_TAIL=$ac_cv_path_PROG_TAIL if test -n "$PROG_TAIL"; then - echo "$as_me:9946: result: $PROG_TAIL" >&5 + echo "$as_me:10494: result: $PROG_TAIL" >&5 echo "${ECHO_T}$PROG_TAIL" >&6 else - echo "$as_me:9949: result: no" >&5 + echo "$as_me:10497: result: no" >&5 echo "${ECHO_T}no" >&6 fi @@ -9977,13 +10525,13 @@ fi # Checks for data types -echo "$as_me:9980: checking for char" >&5 +echo "$as_me:10528: checking for char" >&5 echo $ECHO_N "checking for char... $ECHO_C" >&6 if test "${ac_cv_type_char+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 9986 "configure" +#line 10534 "configure" #include "confdefs.h" $ac_includes_default int @@ -9998,16 +10546,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:10001: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:10549: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:10004: \$? = $ac_status" >&5 + echo "$as_me:10552: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:10007: \"$ac_try\"") >&5 + { (eval echo "$as_me:10555: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:10010: \$? = $ac_status" >&5 + echo "$as_me:10558: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_type_char=yes else @@ -10017,10 +10565,10 @@ fi rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:10020: result: $ac_cv_type_char" >&5 +echo "$as_me:10568: result: $ac_cv_type_char" >&5 echo "${ECHO_T}$ac_cv_type_char" >&6 -echo "$as_me:10023: checking size of char" >&5 +echo "$as_me:10571: checking size of char" >&5 echo $ECHO_N "checking size of char... $ECHO_C" >&6 if test "${ac_cv_sizeof_char+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -10029,7 +10577,7 @@ if test "$cross_compiling" = yes; then # Depending upon the size, compute the lo and hi bounds. cat >conftest.$ac_ext <<_ACEOF -#line 10032 "configure" +#line 10580 "configure" #include "confdefs.h" $ac_includes_default int @@ -10041,21 +10589,21 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:10044: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:10592: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:10047: \$? = $ac_status" >&5 + echo "$as_me:10595: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:10050: \"$ac_try\"") >&5 + { (eval echo "$as_me:10598: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:10053: \$? = $ac_status" >&5 + echo "$as_me:10601: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_lo=0 ac_mid=0 while :; do cat >conftest.$ac_ext <<_ACEOF -#line 10058 "configure" +#line 10606 "configure" #include "confdefs.h" $ac_includes_default int @@ -10067,16 +10615,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:10070: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:10618: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:10073: \$? = $ac_status" >&5 + echo "$as_me:10621: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:10076: \"$ac_try\"") >&5 + { (eval echo "$as_me:10624: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:10079: \$? = $ac_status" >&5 + echo "$as_me:10627: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_hi=$ac_mid; break else @@ -10092,7 +10640,7 @@ ac_hi=-1 ac_mid=-1 while :; do cat >conftest.$ac_ext <<_ACEOF -#line 10095 "configure" +#line 10643 "configure" #include "confdefs.h" $ac_includes_default int @@ -10104,16 +10652,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:10107: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:10655: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:10110: \$? = $ac_status" >&5 + echo "$as_me:10658: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:10113: \"$ac_try\"") >&5 + { (eval echo "$as_me:10661: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:10116: \$? = $ac_status" >&5 + echo "$as_me:10664: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_lo=$ac_mid; break else @@ -10129,7 +10677,7 @@ while test "x$ac_lo" != "x$ac_hi"; do ac_mid=`expr '(' $ac_hi - $ac_lo ')' / 2 + $ac_lo` cat >conftest.$ac_ext <<_ACEOF -#line 10132 "configure" +#line 10680 "configure" #include "confdefs.h" $ac_includes_default int @@ -10141,16 +10689,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:10144: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:10692: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:10147: \$? = $ac_status" >&5 + echo "$as_me:10695: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:10150: \"$ac_try\"") >&5 + { (eval echo "$as_me:10698: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:10153: \$? = $ac_status" >&5 + echo "$as_me:10701: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_hi=$ac_mid else @@ -10163,12 +10711,12 @@ ac_cv_sizeof_char=$ac_lo else if test "$cross_compiling" = yes; then - { { echo "$as_me:10166: error: cannot run test program while cross compiling" >&5 + { { echo "$as_me:10714: error: cannot run test program while cross compiling" >&5 echo "$as_me: error: cannot run test program while cross compiling" >&2;} { (exit 1); exit 1; }; } else cat >conftest.$ac_ext <<_ACEOF -#line 10171 "configure" +#line 10719 "configure" #include "confdefs.h" $ac_includes_default int @@ -10184,15 +10732,15 @@ } _ACEOF rm -f conftest$ac_exeext -if { (eval echo "$as_me:10187: \"$ac_link\"") >&5 +if { (eval echo "$as_me:10735: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:10190: \$? = $ac_status" >&5 + echo "$as_me:10738: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='./conftest$ac_exeext' - { (eval echo "$as_me:10192: \"$ac_try\"") >&5 + { (eval echo "$as_me:10740: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:10195: \$? = $ac_status" >&5 + echo "$as_me:10743: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_sizeof_char=`cat conftest.val` else @@ -10208,19 +10756,19 @@ ac_cv_sizeof_char=0 fi fi -echo "$as_me:10211: result: $ac_cv_sizeof_char" >&5 +echo "$as_me:10759: result: $ac_cv_sizeof_char" >&5 echo "${ECHO_T}$ac_cv_sizeof_char" >&6 cat >>confdefs.h <&5 +echo "$as_me:10765: checking for short int" >&5 echo $ECHO_N "checking for short int... $ECHO_C" >&6 if test "${ac_cv_type_short_int+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 10223 "configure" +#line 10771 "configure" #include "confdefs.h" $ac_includes_default int @@ -10235,16 +10783,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:10238: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:10786: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:10241: \$? = $ac_status" >&5 + echo "$as_me:10789: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:10244: \"$ac_try\"") >&5 + { (eval echo "$as_me:10792: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:10247: \$? = $ac_status" >&5 + echo "$as_me:10795: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_type_short_int=yes else @@ -10254,10 +10802,10 @@ fi rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:10257: result: $ac_cv_type_short_int" >&5 +echo "$as_me:10805: result: $ac_cv_type_short_int" >&5 echo "${ECHO_T}$ac_cv_type_short_int" >&6 -echo "$as_me:10260: checking size of short int" >&5 +echo "$as_me:10808: checking size of short int" >&5 echo $ECHO_N "checking size of short int... $ECHO_C" >&6 if test "${ac_cv_sizeof_short_int+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -10266,7 +10814,7 @@ if test "$cross_compiling" = yes; then # Depending upon the size, compute the lo and hi bounds. cat >conftest.$ac_ext <<_ACEOF -#line 10269 "configure" +#line 10817 "configure" #include "confdefs.h" $ac_includes_default int @@ -10278,21 +10826,21 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:10281: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:10829: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:10284: \$? = $ac_status" >&5 + echo "$as_me:10832: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:10287: \"$ac_try\"") >&5 + { (eval echo "$as_me:10835: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:10290: \$? = $ac_status" >&5 + echo "$as_me:10838: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_lo=0 ac_mid=0 while :; do cat >conftest.$ac_ext <<_ACEOF -#line 10295 "configure" +#line 10843 "configure" #include "confdefs.h" $ac_includes_default int @@ -10304,16 +10852,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:10307: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:10855: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:10310: \$? = $ac_status" >&5 + echo "$as_me:10858: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:10313: \"$ac_try\"") >&5 + { (eval echo "$as_me:10861: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:10316: \$? = $ac_status" >&5 + echo "$as_me:10864: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_hi=$ac_mid; break else @@ -10329,7 +10877,7 @@ ac_hi=-1 ac_mid=-1 while :; do cat >conftest.$ac_ext <<_ACEOF -#line 10332 "configure" +#line 10880 "configure" #include "confdefs.h" $ac_includes_default int @@ -10341,16 +10889,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:10344: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:10892: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:10347: \$? = $ac_status" >&5 + echo "$as_me:10895: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:10350: \"$ac_try\"") >&5 + { (eval echo "$as_me:10898: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:10353: \$? = $ac_status" >&5 + echo "$as_me:10901: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_lo=$ac_mid; break else @@ -10366,7 +10914,7 @@ while test "x$ac_lo" != "x$ac_hi"; do ac_mid=`expr '(' $ac_hi - $ac_lo ')' / 2 + $ac_lo` cat >conftest.$ac_ext <<_ACEOF -#line 10369 "configure" +#line 10917 "configure" #include "confdefs.h" $ac_includes_default int @@ -10378,16 +10926,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:10381: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:10929: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:10384: \$? = $ac_status" >&5 + echo "$as_me:10932: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:10387: \"$ac_try\"") >&5 + { (eval echo "$as_me:10935: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:10390: \$? = $ac_status" >&5 + echo "$as_me:10938: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_hi=$ac_mid else @@ -10400,12 +10948,12 @@ ac_cv_sizeof_short_int=$ac_lo else if test "$cross_compiling" = yes; then - { { echo "$as_me:10403: error: cannot run test program while cross compiling" >&5 + { { echo "$as_me:10951: error: cannot run test program while cross compiling" >&5 echo "$as_me: error: cannot run test program while cross compiling" >&2;} { (exit 1); exit 1; }; } else cat >conftest.$ac_ext <<_ACEOF -#line 10408 "configure" +#line 10956 "configure" #include "confdefs.h" $ac_includes_default int @@ -10421,15 +10969,15 @@ } _ACEOF rm -f conftest$ac_exeext -if { (eval echo "$as_me:10424: \"$ac_link\"") >&5 +if { (eval echo "$as_me:10972: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:10427: \$? = $ac_status" >&5 + echo "$as_me:10975: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='./conftest$ac_exeext' - { (eval echo "$as_me:10429: \"$ac_try\"") >&5 + { (eval echo "$as_me:10977: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:10432: \$? = $ac_status" >&5 + echo "$as_me:10980: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_sizeof_short_int=`cat conftest.val` else @@ -10445,19 +10993,19 @@ ac_cv_sizeof_short_int=0 fi fi -echo "$as_me:10448: result: $ac_cv_sizeof_short_int" >&5 +echo "$as_me:10996: result: $ac_cv_sizeof_short_int" >&5 echo "${ECHO_T}$ac_cv_sizeof_short_int" >&6 cat >>confdefs.h <&5 +echo "$as_me:11002: checking for int" >&5 echo $ECHO_N "checking for int... $ECHO_C" >&6 if test "${ac_cv_type_int+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 10460 "configure" +#line 11008 "configure" #include "confdefs.h" $ac_includes_default int @@ -10472,16 +11020,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:10475: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:11023: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:10478: \$? = $ac_status" >&5 + echo "$as_me:11026: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:10481: \"$ac_try\"") >&5 + { (eval echo "$as_me:11029: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:10484: \$? = $ac_status" >&5 + echo "$as_me:11032: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_type_int=yes else @@ -10491,10 +11039,10 @@ fi rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:10494: result: $ac_cv_type_int" >&5 +echo "$as_me:11042: result: $ac_cv_type_int" >&5 echo "${ECHO_T}$ac_cv_type_int" >&6 -echo "$as_me:10497: checking size of int" >&5 +echo "$as_me:11045: checking size of int" >&5 echo $ECHO_N "checking size of int... $ECHO_C" >&6 if test "${ac_cv_sizeof_int+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -10503,7 +11051,7 @@ if test "$cross_compiling" = yes; then # Depending upon the size, compute the lo and hi bounds. cat >conftest.$ac_ext <<_ACEOF -#line 10506 "configure" +#line 11054 "configure" #include "confdefs.h" $ac_includes_default int @@ -10515,21 +11063,21 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:10518: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:11066: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:10521: \$? = $ac_status" >&5 + echo "$as_me:11069: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:10524: \"$ac_try\"") >&5 + { (eval echo "$as_me:11072: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:10527: \$? = $ac_status" >&5 + echo "$as_me:11075: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_lo=0 ac_mid=0 while :; do cat >conftest.$ac_ext <<_ACEOF -#line 10532 "configure" +#line 11080 "configure" #include "confdefs.h" $ac_includes_default int @@ -10541,16 +11089,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:10544: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:11092: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:10547: \$? = $ac_status" >&5 + echo "$as_me:11095: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:10550: \"$ac_try\"") >&5 + { (eval echo "$as_me:11098: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:10553: \$? = $ac_status" >&5 + echo "$as_me:11101: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_hi=$ac_mid; break else @@ -10566,7 +11114,7 @@ ac_hi=-1 ac_mid=-1 while :; do cat >conftest.$ac_ext <<_ACEOF -#line 10569 "configure" +#line 11117 "configure" #include "confdefs.h" $ac_includes_default int @@ -10578,16 +11126,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:10581: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:11129: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:10584: \$? = $ac_status" >&5 + echo "$as_me:11132: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:10587: \"$ac_try\"") >&5 + { (eval echo "$as_me:11135: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:10590: \$? = $ac_status" >&5 + echo "$as_me:11138: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_lo=$ac_mid; break else @@ -10603,7 +11151,7 @@ while test "x$ac_lo" != "x$ac_hi"; do ac_mid=`expr '(' $ac_hi - $ac_lo ')' / 2 + $ac_lo` cat >conftest.$ac_ext <<_ACEOF -#line 10606 "configure" +#line 11154 "configure" #include "confdefs.h" $ac_includes_default int @@ -10615,16 +11163,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:10618: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:11166: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:10621: \$? = $ac_status" >&5 + echo "$as_me:11169: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:10624: \"$ac_try\"") >&5 + { (eval echo "$as_me:11172: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:10627: \$? = $ac_status" >&5 + echo "$as_me:11175: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_hi=$ac_mid else @@ -10637,12 +11185,12 @@ ac_cv_sizeof_int=$ac_lo else if test "$cross_compiling" = yes; then - { { echo "$as_me:10640: error: cannot run test program while cross compiling" >&5 + { { echo "$as_me:11188: error: cannot run test program while cross compiling" >&5 echo "$as_me: error: cannot run test program while cross compiling" >&2;} { (exit 1); exit 1; }; } else cat >conftest.$ac_ext <<_ACEOF -#line 10645 "configure" +#line 11193 "configure" #include "confdefs.h" $ac_includes_default int @@ -10658,15 +11206,15 @@ } _ACEOF rm -f conftest$ac_exeext -if { (eval echo "$as_me:10661: \"$ac_link\"") >&5 +if { (eval echo "$as_me:11209: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:10664: \$? = $ac_status" >&5 + echo "$as_me:11212: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='./conftest$ac_exeext' - { (eval echo "$as_me:10666: \"$ac_try\"") >&5 + { (eval echo "$as_me:11214: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:10669: \$? = $ac_status" >&5 + echo "$as_me:11217: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_sizeof_int=`cat conftest.val` else @@ -10682,19 +11230,19 @@ ac_cv_sizeof_int=0 fi fi -echo "$as_me:10685: result: $ac_cv_sizeof_int" >&5 +echo "$as_me:11233: result: $ac_cv_sizeof_int" >&5 echo "${ECHO_T}$ac_cv_sizeof_int" >&6 cat >>confdefs.h <&5 +echo "$as_me:11239: checking for long int" >&5 echo $ECHO_N "checking for long int... $ECHO_C" >&6 if test "${ac_cv_type_long_int+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 10697 "configure" +#line 11245 "configure" #include "confdefs.h" $ac_includes_default int @@ -10709,16 +11257,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:10712: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:11260: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:10715: \$? = $ac_status" >&5 + echo "$as_me:11263: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:10718: \"$ac_try\"") >&5 + { (eval echo "$as_me:11266: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:10721: \$? = $ac_status" >&5 + echo "$as_me:11269: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_type_long_int=yes else @@ -10728,10 +11276,10 @@ fi rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:10731: result: $ac_cv_type_long_int" >&5 +echo "$as_me:11279: result: $ac_cv_type_long_int" >&5 echo "${ECHO_T}$ac_cv_type_long_int" >&6 -echo "$as_me:10734: checking size of long int" >&5 +echo "$as_me:11282: checking size of long int" >&5 echo $ECHO_N "checking size of long int... $ECHO_C" >&6 if test "${ac_cv_sizeof_long_int+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -10740,7 +11288,7 @@ if test "$cross_compiling" = yes; then # Depending upon the size, compute the lo and hi bounds. cat >conftest.$ac_ext <<_ACEOF -#line 10743 "configure" +#line 11291 "configure" #include "confdefs.h" $ac_includes_default int @@ -10752,21 +11300,21 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:10755: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:11303: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:10758: \$? = $ac_status" >&5 + echo "$as_me:11306: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:10761: \"$ac_try\"") >&5 + { (eval echo "$as_me:11309: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:10764: \$? = $ac_status" >&5 + echo "$as_me:11312: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_lo=0 ac_mid=0 while :; do cat >conftest.$ac_ext <<_ACEOF -#line 10769 "configure" +#line 11317 "configure" #include "confdefs.h" $ac_includes_default int @@ -10778,16 +11326,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:10781: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:11329: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:10784: \$? = $ac_status" >&5 + echo "$as_me:11332: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:10787: \"$ac_try\"") >&5 + { (eval echo "$as_me:11335: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:10790: \$? = $ac_status" >&5 + echo "$as_me:11338: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_hi=$ac_mid; break else @@ -10803,7 +11351,7 @@ ac_hi=-1 ac_mid=-1 while :; do cat >conftest.$ac_ext <<_ACEOF -#line 10806 "configure" +#line 11354 "configure" #include "confdefs.h" $ac_includes_default int @@ -10815,16 +11363,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:10818: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:11366: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:10821: \$? = $ac_status" >&5 + echo "$as_me:11369: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:10824: \"$ac_try\"") >&5 + { (eval echo "$as_me:11372: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:10827: \$? = $ac_status" >&5 + echo "$as_me:11375: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_lo=$ac_mid; break else @@ -10840,7 +11388,7 @@ while test "x$ac_lo" != "x$ac_hi"; do ac_mid=`expr '(' $ac_hi - $ac_lo ')' / 2 + $ac_lo` cat >conftest.$ac_ext <<_ACEOF -#line 10843 "configure" +#line 11391 "configure" #include "confdefs.h" $ac_includes_default int @@ -10852,16 +11400,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:10855: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:11403: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:10858: \$? = $ac_status" >&5 + echo "$as_me:11406: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:10861: \"$ac_try\"") >&5 + { (eval echo "$as_me:11409: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:10864: \$? = $ac_status" >&5 + echo "$as_me:11412: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_hi=$ac_mid else @@ -10874,12 +11422,12 @@ ac_cv_sizeof_long_int=$ac_lo else if test "$cross_compiling" = yes; then - { { echo "$as_me:10877: error: cannot run test program while cross compiling" >&5 + { { echo "$as_me:11425: error: cannot run test program while cross compiling" >&5 echo "$as_me: error: cannot run test program while cross compiling" >&2;} { (exit 1); exit 1; }; } else cat >conftest.$ac_ext <<_ACEOF -#line 10882 "configure" +#line 11430 "configure" #include "confdefs.h" $ac_includes_default int @@ -10895,15 +11443,15 @@ } _ACEOF rm -f conftest$ac_exeext -if { (eval echo "$as_me:10898: \"$ac_link\"") >&5 +if { (eval echo "$as_me:11446: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:10901: \$? = $ac_status" >&5 + echo "$as_me:11449: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='./conftest$ac_exeext' - { (eval echo "$as_me:10903: \"$ac_try\"") >&5 + { (eval echo "$as_me:11451: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:10906: \$? = $ac_status" >&5 + echo "$as_me:11454: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_sizeof_long_int=`cat conftest.val` else @@ -10919,19 +11467,19 @@ ac_cv_sizeof_long_int=0 fi fi -echo "$as_me:10922: result: $ac_cv_sizeof_long_int" >&5 +echo "$as_me:11470: result: $ac_cv_sizeof_long_int" >&5 echo "${ECHO_T}$ac_cv_sizeof_long_int" >&6 cat >>confdefs.h <&5 +echo "$as_me:11476: checking for long long int" >&5 echo $ECHO_N "checking for long long int... $ECHO_C" >&6 if test "${ac_cv_type_long_long_int+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 10934 "configure" +#line 11482 "configure" #include "confdefs.h" $ac_includes_default int @@ -10946,16 +11494,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:10949: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:11497: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:10952: \$? = $ac_status" >&5 + echo "$as_me:11500: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:10955: \"$ac_try\"") >&5 + { (eval echo "$as_me:11503: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:10958: \$? = $ac_status" >&5 + echo "$as_me:11506: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_type_long_long_int=yes else @@ -10965,10 +11513,10 @@ fi rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:10968: result: $ac_cv_type_long_long_int" >&5 +echo "$as_me:11516: result: $ac_cv_type_long_long_int" >&5 echo "${ECHO_T}$ac_cv_type_long_long_int" >&6 -echo "$as_me:10971: checking size of long long int" >&5 +echo "$as_me:11519: checking size of long long int" >&5 echo $ECHO_N "checking size of long long int... $ECHO_C" >&6 if test "${ac_cv_sizeof_long_long_int+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -10977,7 +11525,7 @@ if test "$cross_compiling" = yes; then # Depending upon the size, compute the lo and hi bounds. cat >conftest.$ac_ext <<_ACEOF -#line 10980 "configure" +#line 11528 "configure" #include "confdefs.h" $ac_includes_default int @@ -10989,21 +11537,21 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:10992: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:11540: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:10995: \$? = $ac_status" >&5 + echo "$as_me:11543: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:10998: \"$ac_try\"") >&5 + { (eval echo "$as_me:11546: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:11001: \$? = $ac_status" >&5 + echo "$as_me:11549: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_lo=0 ac_mid=0 while :; do cat >conftest.$ac_ext <<_ACEOF -#line 11006 "configure" +#line 11554 "configure" #include "confdefs.h" $ac_includes_default int @@ -11015,16 +11563,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:11018: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:11566: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:11021: \$? = $ac_status" >&5 + echo "$as_me:11569: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:11024: \"$ac_try\"") >&5 + { (eval echo "$as_me:11572: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:11027: \$? = $ac_status" >&5 + echo "$as_me:11575: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_hi=$ac_mid; break else @@ -11040,7 +11588,7 @@ ac_hi=-1 ac_mid=-1 while :; do cat >conftest.$ac_ext <<_ACEOF -#line 11043 "configure" +#line 11591 "configure" #include "confdefs.h" $ac_includes_default int @@ -11052,16 +11600,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:11055: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:11603: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:11058: \$? = $ac_status" >&5 + echo "$as_me:11606: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:11061: \"$ac_try\"") >&5 + { (eval echo "$as_me:11609: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:11064: \$? = $ac_status" >&5 + echo "$as_me:11612: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_lo=$ac_mid; break else @@ -11077,7 +11625,7 @@ while test "x$ac_lo" != "x$ac_hi"; do ac_mid=`expr '(' $ac_hi - $ac_lo ')' / 2 + $ac_lo` cat >conftest.$ac_ext <<_ACEOF -#line 11080 "configure" +#line 11628 "configure" #include "confdefs.h" $ac_includes_default int @@ -11089,16 +11637,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:11092: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:11640: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:11095: \$? = $ac_status" >&5 + echo "$as_me:11643: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:11098: \"$ac_try\"") >&5 + { (eval echo "$as_me:11646: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:11101: \$? = $ac_status" >&5 + echo "$as_me:11649: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_hi=$ac_mid else @@ -11111,12 +11659,12 @@ ac_cv_sizeof_long_long_int=$ac_lo else if test "$cross_compiling" = yes; then - { { echo "$as_me:11114: error: cannot run test program while cross compiling" >&5 + { { echo "$as_me:11662: error: cannot run test program while cross compiling" >&5 echo "$as_me: error: cannot run test program while cross compiling" >&2;} { (exit 1); exit 1; }; } else cat >conftest.$ac_ext <<_ACEOF -#line 11119 "configure" +#line 11667 "configure" #include "confdefs.h" $ac_includes_default int @@ -11132,15 +11680,15 @@ } _ACEOF rm -f conftest$ac_exeext -if { (eval echo "$as_me:11135: \"$ac_link\"") >&5 +if { (eval echo "$as_me:11683: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:11138: \$? = $ac_status" >&5 + echo "$as_me:11686: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='./conftest$ac_exeext' - { (eval echo "$as_me:11140: \"$ac_try\"") >&5 + { (eval echo "$as_me:11688: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:11143: \$? = $ac_status" >&5 + echo "$as_me:11691: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_sizeof_long_long_int=`cat conftest.val` else @@ -11156,7 +11704,7 @@ ac_cv_sizeof_long_long_int=0 fi fi -echo "$as_me:11159: result: $ac_cv_sizeof_long_long_int" >&5 +echo "$as_me:11707: result: $ac_cv_sizeof_long_long_int" >&5 echo "${ECHO_T}$ac_cv_sizeof_long_long_int" >&6 cat >>confdefs.h <&5 +echo "$as_me:11719: checking for u_int type" >&5 echo $ECHO_N "checking for u_int type... $ECHO_C" >&6 if test "${ac_cv_have_u_int+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 11178 "configure" +#line 11726 "configure" #include "confdefs.h" #include int @@ -11187,16 +11735,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:11190: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:11738: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:11193: \$? = $ac_status" >&5 + echo "$as_me:11741: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:11196: \"$ac_try\"") >&5 + { (eval echo "$as_me:11744: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:11199: \$? = $ac_status" >&5 + echo "$as_me:11747: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_have_u_int="yes" else @@ -11208,7 +11756,7 @@ rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:11211: result: $ac_cv_have_u_int" >&5 +echo "$as_me:11759: result: $ac_cv_have_u_int" >&5 echo "${ECHO_T}$ac_cv_have_u_int" >&6 if test "x$ac_cv_have_u_int" = "xyes" ; then cat >>confdefs.h <<\EOF @@ -11218,14 +11766,14 @@ have_u_int=1 fi -echo "$as_me:11221: checking for intXX_t types" >&5 +echo "$as_me:11769: checking for intXX_t types" >&5 echo $ECHO_N "checking for intXX_t types... $ECHO_C" >&6 if test "${ac_cv_have_intxx_t+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 11228 "configure" +#line 11776 "configure" #include "confdefs.h" #include int @@ -11237,16 +11785,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:11240: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:11788: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:11243: \$? = $ac_status" >&5 + echo "$as_me:11791: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:11246: \"$ac_try\"") >&5 + { (eval echo "$as_me:11794: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:11249: \$? = $ac_status" >&5 + echo "$as_me:11797: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_have_intxx_t="yes" else @@ -11258,7 +11806,7 @@ rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:11261: result: $ac_cv_have_intxx_t" >&5 +echo "$as_me:11809: result: $ac_cv_have_intxx_t" >&5 echo "${ECHO_T}$ac_cv_have_intxx_t" >&6 if test "x$ac_cv_have_intxx_t" = "xyes" ; then cat >>confdefs.h <<\EOF @@ -11269,12 +11817,12 @@ fi if (test -z "$have_intxx_t" && \ - test "x$ac_cv_header_stdint_h" = "xyes") + test "x$ac_cv_header_stdint_h" = "xyes") then - echo "$as_me:11274: checking for intXX_t types in stdint.h" >&5 + echo "$as_me:11822: checking for intXX_t types in stdint.h" >&5 echo $ECHO_N "checking for intXX_t types in stdint.h... $ECHO_C" >&6 cat >conftest.$ac_ext <<_ACEOF -#line 11277 "configure" +#line 11825 "configure" #include "confdefs.h" #include int @@ -11286,43 +11834,43 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:11289: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:11837: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:11292: \$? = $ac_status" >&5 + echo "$as_me:11840: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:11295: \"$ac_try\"") >&5 + { (eval echo "$as_me:11843: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:11298: \$? = $ac_status" >&5 + echo "$as_me:11846: \$? = $ac_status" >&5 (exit $ac_status); }; }; then cat >>confdefs.h <<\EOF #define HAVE_INTXX_T 1 EOF - echo "$as_me:11305: result: yes" >&5 + echo "$as_me:11853: result: yes" >&5 echo "${ECHO_T}yes" >&6 else echo "$as_me: failed program was:" >&5 cat conftest.$ac_ext >&5 - echo "$as_me:11311: result: no" >&5 + echo "$as_me:11859: result: no" >&5 echo "${ECHO_T}no" >&6 fi rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:11318: checking for int64_t type" >&5 +echo "$as_me:11866: checking for int64_t type" >&5 echo $ECHO_N "checking for int64_t type... $ECHO_C" >&6 if test "${ac_cv_have_int64_t+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 11325 "configure" +#line 11873 "configure" #include "confdefs.h" #include @@ -11343,16 +11891,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:11346: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:11894: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:11349: \$? = $ac_status" >&5 + echo "$as_me:11897: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:11352: \"$ac_try\"") >&5 + { (eval echo "$as_me:11900: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:11355: \$? = $ac_status" >&5 + echo "$as_me:11903: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_have_int64_t="yes" else @@ -11364,7 +11912,7 @@ rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:11367: result: $ac_cv_have_int64_t" >&5 +echo "$as_me:11915: result: $ac_cv_have_int64_t" >&5 echo "${ECHO_T}$ac_cv_have_int64_t" >&6 if test "x$ac_cv_have_int64_t" = "xyes" ; then cat >>confdefs.h <<\EOF @@ -11373,14 +11921,14 @@ fi -echo "$as_me:11376: checking for u_intXX_t types" >&5 +echo "$as_me:11924: checking for u_intXX_t types" >&5 echo $ECHO_N "checking for u_intXX_t types... $ECHO_C" >&6 if test "${ac_cv_have_u_intxx_t+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 11383 "configure" +#line 11931 "configure" #include "confdefs.h" #include int @@ -11392,16 +11940,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:11395: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:11943: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:11398: \$? = $ac_status" >&5 + echo "$as_me:11946: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:11401: \"$ac_try\"") >&5 + { (eval echo "$as_me:11949: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:11404: \$? = $ac_status" >&5 + echo "$as_me:11952: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_have_u_intxx_t="yes" else @@ -11413,7 +11961,7 @@ rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:11416: result: $ac_cv_have_u_intxx_t" >&5 +echo "$as_me:11964: result: $ac_cv_have_u_intxx_t" >&5 echo "${ECHO_T}$ac_cv_have_u_intxx_t" >&6 if test "x$ac_cv_have_u_intxx_t" = "xyes" ; then cat >>confdefs.h <<\EOF @@ -11424,10 +11972,10 @@ fi if test -z "$have_u_intxx_t" ; then - echo "$as_me:11427: checking for u_intXX_t types in sys/socket.h" >&5 + echo "$as_me:11975: checking for u_intXX_t types in sys/socket.h" >&5 echo $ECHO_N "checking for u_intXX_t types in sys/socket.h... $ECHO_C" >&6 cat >conftest.$ac_ext <<_ACEOF -#line 11430 "configure" +#line 11978 "configure" #include "confdefs.h" #include int @@ -11439,43 +11987,43 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:11442: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:11990: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:11445: \$? = $ac_status" >&5 + echo "$as_me:11993: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:11448: \"$ac_try\"") >&5 + { (eval echo "$as_me:11996: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:11451: \$? = $ac_status" >&5 + echo "$as_me:11999: \$? = $ac_status" >&5 (exit $ac_status); }; }; then cat >>confdefs.h <<\EOF #define HAVE_U_INTXX_T 1 EOF - echo "$as_me:11458: result: yes" >&5 + echo "$as_me:12006: result: yes" >&5 echo "${ECHO_T}yes" >&6 else echo "$as_me: failed program was:" >&5 cat conftest.$ac_ext >&5 - echo "$as_me:11464: result: no" >&5 + echo "$as_me:12012: result: no" >&5 echo "${ECHO_T}no" >&6 fi rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:11471: checking for u_int64_t types" >&5 +echo "$as_me:12019: checking for u_int64_t types" >&5 echo $ECHO_N "checking for u_int64_t types... $ECHO_C" >&6 if test "${ac_cv_have_u_int64_t+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 11478 "configure" +#line 12026 "configure" #include "confdefs.h" #include int @@ -11487,16 +12035,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:11490: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:12038: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:11493: \$? = $ac_status" >&5 + echo "$as_me:12041: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:11496: \"$ac_try\"") >&5 + { (eval echo "$as_me:12044: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:11499: \$? = $ac_status" >&5 + echo "$as_me:12047: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_have_u_int64_t="yes" else @@ -11508,7 +12056,7 @@ rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:11511: result: $ac_cv_have_u_int64_t" >&5 +echo "$as_me:12059: result: $ac_cv_have_u_int64_t" >&5 echo "${ECHO_T}$ac_cv_have_u_int64_t" >&6 if test "x$ac_cv_have_u_int64_t" = "xyes" ; then cat >>confdefs.h <<\EOF @@ -11519,10 +12067,10 @@ fi if test -z "$have_u_int64_t" ; then - echo "$as_me:11522: checking for u_int64_t type in sys/bitypes.h" >&5 + echo "$as_me:12070: checking for u_int64_t type in sys/bitypes.h" >&5 echo $ECHO_N "checking for u_int64_t type in sys/bitypes.h... $ECHO_C" >&6 cat >conftest.$ac_ext <<_ACEOF -#line 11525 "configure" +#line 12073 "configure" #include "confdefs.h" #include int @@ -11534,29 +12082,29 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:11537: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:12085: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:11540: \$? = $ac_status" >&5 + echo "$as_me:12088: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:11543: \"$ac_try\"") >&5 + { (eval echo "$as_me:12091: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:11546: \$? = $ac_status" >&5 + echo "$as_me:12094: \$? = $ac_status" >&5 (exit $ac_status); }; }; then cat >>confdefs.h <<\EOF #define HAVE_U_INT64_T 1 EOF - echo "$as_me:11553: result: yes" >&5 + echo "$as_me:12101: result: yes" >&5 echo "${ECHO_T}yes" >&6 else echo "$as_me: failed program was:" >&5 cat conftest.$ac_ext >&5 - echo "$as_me:11559: result: no" >&5 + echo "$as_me:12107: result: no" >&5 echo "${ECHO_T}no" >&6 fi @@ -11564,14 +12112,14 @@ fi if test -z "$have_u_intxx_t" ; then - echo "$as_me:11567: checking for uintXX_t types" >&5 + echo "$as_me:12115: checking for uintXX_t types" >&5 echo $ECHO_N "checking for uintXX_t types... $ECHO_C" >&6 if test "${ac_cv_have_uintxx_t+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 11574 "configure" +#line 12122 "configure" #include "confdefs.h" #include @@ -11585,16 +12133,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:11588: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:12136: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:11591: \$? = $ac_status" >&5 + echo "$as_me:12139: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:11594: \"$ac_try\"") >&5 + { (eval echo "$as_me:12142: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:11597: \$? = $ac_status" >&5 + echo "$as_me:12145: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_have_uintxx_t="yes" else @@ -11606,7 +12154,7 @@ rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:11609: result: $ac_cv_have_uintxx_t" >&5 +echo "$as_me:12157: result: $ac_cv_have_uintxx_t" >&5 echo "${ECHO_T}$ac_cv_have_uintxx_t" >&6 if test "x$ac_cv_have_uintxx_t" = "xyes" ; then cat >>confdefs.h <<\EOF @@ -11617,10 +12165,10 @@ fi if test -z "$have_uintxx_t" ; then - echo "$as_me:11620: checking for uintXX_t types in stdint.h" >&5 + echo "$as_me:12168: checking for uintXX_t types in stdint.h" >&5 echo $ECHO_N "checking for uintXX_t types in stdint.h... $ECHO_C" >&6 cat >conftest.$ac_ext <<_ACEOF -#line 11623 "configure" +#line 12171 "configure" #include "confdefs.h" #include int @@ -11632,29 +12180,29 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:11635: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:12183: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:11638: \$? = $ac_status" >&5 + echo "$as_me:12186: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:11641: \"$ac_try\"") >&5 + { (eval echo "$as_me:12189: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:11644: \$? = $ac_status" >&5 + echo "$as_me:12192: \$? = $ac_status" >&5 (exit $ac_status); }; }; then cat >>confdefs.h <<\EOF #define HAVE_UINTXX_T 1 EOF - echo "$as_me:11651: result: yes" >&5 + echo "$as_me:12199: result: yes" >&5 echo "${ECHO_T}yes" >&6 else echo "$as_me: failed program was:" >&5 cat conftest.$ac_ext >&5 - echo "$as_me:11657: result: no" >&5 + echo "$as_me:12205: result: no" >&5 echo "${ECHO_T}no" >&6 fi @@ -11662,12 +12210,12 @@ fi if (test -z "$have_u_intxx_t" || test -z "$have_intxx_t" && \ - test "x$ac_cv_header_sys_bitypes_h" = "xyes") + test "x$ac_cv_header_sys_bitypes_h" = "xyes") then - echo "$as_me:11667: checking for intXX_t and u_intXX_t types in sys/bitypes.h" >&5 + echo "$as_me:12215: checking for intXX_t and u_intXX_t types in sys/bitypes.h" >&5 echo $ECHO_N "checking for intXX_t and u_intXX_t types in sys/bitypes.h... $ECHO_C" >&6 cat >conftest.$ac_ext <<_ACEOF -#line 11670 "configure" +#line 12218 "configure" #include "confdefs.h" #include @@ -11685,16 +12233,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:11688: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:12236: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:11691: \$? = $ac_status" >&5 + echo "$as_me:12239: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:11694: \"$ac_try\"") >&5 + { (eval echo "$as_me:12242: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:11697: \$? = $ac_status" >&5 + echo "$as_me:12245: \$? = $ac_status" >&5 (exit $ac_status); }; }; then cat >>confdefs.h <<\EOF @@ -11705,27 +12253,27 @@ #define HAVE_INTXX_T 1 EOF - echo "$as_me:11708: result: yes" >&5 + echo "$as_me:12256: result: yes" >&5 echo "${ECHO_T}yes" >&6 else echo "$as_me: failed program was:" >&5 cat conftest.$ac_ext >&5 -echo "$as_me:11714: result: no" >&5 +echo "$as_me:12262: result: no" >&5 echo "${ECHO_T}no" >&6 fi rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:11721: checking for u_char" >&5 +echo "$as_me:12269: checking for u_char" >&5 echo $ECHO_N "checking for u_char... $ECHO_C" >&6 if test "${ac_cv_have_u_char+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 11728 "configure" +#line 12276 "configure" #include "confdefs.h" #include @@ -11739,16 +12287,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:11742: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:12290: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:11745: \$? = $ac_status" >&5 + echo "$as_me:12293: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:11748: \"$ac_try\"") >&5 + { (eval echo "$as_me:12296: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:11751: \$? = $ac_status" >&5 + echo "$as_me:12299: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_have_u_char="yes" else @@ -11760,7 +12308,7 @@ rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:11763: result: $ac_cv_have_u_char" >&5 +echo "$as_me:12311: result: $ac_cv_have_u_char" >&5 echo "${ECHO_T}$ac_cv_have_u_char" >&6 if test "x$ac_cv_have_u_char" = "xyes" ; then cat >>confdefs.h <<\EOF @@ -11769,13 +12317,13 @@ fi - echo "$as_me:11772: checking for socklen_t" >&5 + echo "$as_me:12320: checking for socklen_t" >&5 echo $ECHO_N "checking for socklen_t... $ECHO_C" >&6 if test "${ac_cv_type_socklen_t+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 11778 "configure" +#line 12326 "configure" #include "confdefs.h" #include #include @@ -11792,16 +12340,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:11795: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:12343: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:11798: \$? = $ac_status" >&5 + echo "$as_me:12346: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:11801: \"$ac_try\"") >&5 + { (eval echo "$as_me:12349: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:11804: \$? = $ac_status" >&5 + echo "$as_me:12352: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_type_socklen_t=yes else @@ -11811,13 +12359,13 @@ fi rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:11814: result: $ac_cv_type_socklen_t" >&5 +echo "$as_me:12362: result: $ac_cv_type_socklen_t" >&5 echo "${ECHO_T}$ac_cv_type_socklen_t" >&6 if test $ac_cv_type_socklen_t = yes; then : else - echo "$as_me:11820: checking for socklen_t equivalent" >&5 + echo "$as_me:12368: checking for socklen_t equivalent" >&5 echo $ECHO_N "checking for socklen_t equivalent... $ECHO_C" >&6 if test "${curl_cv_socklen_t_equiv+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -11829,7 +12377,7 @@ for arg2 in "struct sockaddr" void; do for t in int size_t unsigned long "unsigned long"; do cat >conftest.$ac_ext <<_ACEOF -#line 11832 "configure" +#line 12380 "configure" #include "confdefs.h" #include @@ -11849,16 +12397,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:11852: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:12400: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:11855: \$? = $ac_status" >&5 + echo "$as_me:12403: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:11858: \"$ac_try\"") >&5 + { (eval echo "$as_me:12406: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:11861: \$? = $ac_status" >&5 + echo "$as_me:12409: \$? = $ac_status" >&5 (exit $ac_status); }; }; then curl_cv_socklen_t_equiv="$t" @@ -11873,14 +12421,14 @@ done if test "x$curl_cv_socklen_t_equiv" = x; then - { { echo "$as_me:11876: error: Cannot find a type to use in place of socklen_t" >&5 + { { echo "$as_me:12424: error: Cannot find a type to use in place of socklen_t" >&5 echo "$as_me: error: Cannot find a type to use in place of socklen_t" >&2;} { (exit 1); exit 1; }; } fi fi - echo "$as_me:11883: result: $curl_cv_socklen_t_equiv" >&5 + echo "$as_me:12431: result: $curl_cv_socklen_t_equiv" >&5 echo "${ECHO_T}$curl_cv_socklen_t_equiv" >&6 cat >>confdefs.h <&5 +echo "$as_me:12440: checking for sig_atomic_t" >&5 echo $ECHO_N "checking for sig_atomic_t... $ECHO_C" >&6 if test "${ac_cv_type_sig_atomic_t+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 11898 "configure" +#line 12446 "configure" #include "confdefs.h" #include @@ -11911,16 +12459,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:11914: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:12462: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:11917: \$? = $ac_status" >&5 + echo "$as_me:12465: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:11920: \"$ac_try\"") >&5 + { (eval echo "$as_me:12468: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:11923: \$? = $ac_status" >&5 + echo "$as_me:12471: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_type_sig_atomic_t=yes else @@ -11930,7 +12478,7 @@ fi rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:11933: result: $ac_cv_type_sig_atomic_t" >&5 +echo "$as_me:12481: result: $ac_cv_type_sig_atomic_t" >&5 echo "${ECHO_T}$ac_cv_type_sig_atomic_t" >&6 if test $ac_cv_type_sig_atomic_t = yes; then @@ -11940,14 +12488,14 @@ fi -echo "$as_me:11943: checking for size_t" >&5 +echo "$as_me:12491: checking for size_t" >&5 echo $ECHO_N "checking for size_t... $ECHO_C" >&6 if test "${ac_cv_have_size_t+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 11950 "configure" +#line 12498 "configure" #include "confdefs.h" #include @@ -11961,16 +12509,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:11964: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:12512: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:11967: \$? = $ac_status" >&5 + echo "$as_me:12515: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:11970: \"$ac_try\"") >&5 + { (eval echo "$as_me:12518: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:11973: \$? = $ac_status" >&5 + echo "$as_me:12521: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_have_size_t="yes" else @@ -11982,7 +12530,7 @@ rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:11985: result: $ac_cv_have_size_t" >&5 +echo "$as_me:12533: result: $ac_cv_have_size_t" >&5 echo "${ECHO_T}$ac_cv_have_size_t" >&6 if test "x$ac_cv_have_size_t" = "xyes" ; then cat >>confdefs.h <<\EOF @@ -11991,14 +12539,14 @@ fi -echo "$as_me:11994: checking for ssize_t" >&5 +echo "$as_me:12542: checking for ssize_t" >&5 echo $ECHO_N "checking for ssize_t... $ECHO_C" >&6 if test "${ac_cv_have_ssize_t+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 12001 "configure" +#line 12549 "configure" #include "confdefs.h" #include @@ -12012,16 +12560,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:12015: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:12563: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:12018: \$? = $ac_status" >&5 + echo "$as_me:12566: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:12021: \"$ac_try\"") >&5 + { (eval echo "$as_me:12569: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:12024: \$? = $ac_status" >&5 + echo "$as_me:12572: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_have_ssize_t="yes" else @@ -12033,7 +12581,7 @@ rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:12036: result: $ac_cv_have_ssize_t" >&5 +echo "$as_me:12584: result: $ac_cv_have_ssize_t" >&5 echo "${ECHO_T}$ac_cv_have_ssize_t" >&6 if test "x$ac_cv_have_ssize_t" = "xyes" ; then cat >>confdefs.h <<\EOF @@ -12042,14 +12590,14 @@ fi -echo "$as_me:12045: checking for clock_t" >&5 +echo "$as_me:12593: checking for clock_t" >&5 echo $ECHO_N "checking for clock_t... $ECHO_C" >&6 if test "${ac_cv_have_clock_t+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 12052 "configure" +#line 12600 "configure" #include "confdefs.h" #include @@ -12063,16 +12611,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:12066: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:12614: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:12069: \$? = $ac_status" >&5 + echo "$as_me:12617: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:12072: \"$ac_try\"") >&5 + { (eval echo "$as_me:12620: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:12075: \$? = $ac_status" >&5 + echo "$as_me:12623: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_have_clock_t="yes" else @@ -12084,7 +12632,7 @@ rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:12087: result: $ac_cv_have_clock_t" >&5 +echo "$as_me:12635: result: $ac_cv_have_clock_t" >&5 echo "${ECHO_T}$ac_cv_have_clock_t" >&6 if test "x$ac_cv_have_clock_t" = "xyes" ; then cat >>confdefs.h <<\EOF @@ -12093,14 +12641,14 @@ fi -echo "$as_me:12096: checking for sa_family_t" >&5 +echo "$as_me:12644: checking for sa_family_t" >&5 echo $ECHO_N "checking for sa_family_t... $ECHO_C" >&6 if test "${ac_cv_have_sa_family_t+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 12103 "configure" +#line 12651 "configure" #include "confdefs.h" #include @@ -12115,23 +12663,23 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:12118: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:12666: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:12121: \$? = $ac_status" >&5 + echo "$as_me:12669: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:12124: \"$ac_try\"") >&5 + { (eval echo "$as_me:12672: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:12127: \$? = $ac_status" >&5 + echo "$as_me:12675: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_have_sa_family_t="yes" else echo "$as_me: failed program was:" >&5 cat conftest.$ac_ext >&5 cat >conftest.$ac_ext <<_ACEOF -#line 12134 "configure" +#line 12682 "configure" #include "confdefs.h" #include @@ -12147,16 +12695,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:12150: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:12698: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:12153: \$? = $ac_status" >&5 + echo "$as_me:12701: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:12156: \"$ac_try\"") >&5 + { (eval echo "$as_me:12704: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:12159: \$? = $ac_status" >&5 + echo "$as_me:12707: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_have_sa_family_t="yes" else @@ -12171,7 +12719,7 @@ rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:12174: result: $ac_cv_have_sa_family_t" >&5 +echo "$as_me:12722: result: $ac_cv_have_sa_family_t" >&5 echo "${ECHO_T}$ac_cv_have_sa_family_t" >&6 if test "x$ac_cv_have_sa_family_t" = "xyes" ; then cat >>confdefs.h <<\EOF @@ -12180,14 +12728,14 @@ fi -echo "$as_me:12183: checking for pid_t" >&5 +echo "$as_me:12731: checking for pid_t" >&5 echo $ECHO_N "checking for pid_t... $ECHO_C" >&6 if test "${ac_cv_have_pid_t+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 12190 "configure" +#line 12738 "configure" #include "confdefs.h" #include @@ -12201,16 +12749,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:12204: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:12752: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:12207: \$? = $ac_status" >&5 + echo "$as_me:12755: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:12210: \"$ac_try\"") >&5 + { (eval echo "$as_me:12758: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:12213: \$? = $ac_status" >&5 + echo "$as_me:12761: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_have_pid_t="yes" else @@ -12222,7 +12770,7 @@ rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:12225: result: $ac_cv_have_pid_t" >&5 +echo "$as_me:12773: result: $ac_cv_have_pid_t" >&5 echo "${ECHO_T}$ac_cv_have_pid_t" >&6 if test "x$ac_cv_have_pid_t" = "xyes" ; then cat >>confdefs.h <<\EOF @@ -12231,14 +12779,14 @@ fi -echo "$as_me:12234: checking for mode_t" >&5 +echo "$as_me:12782: checking for mode_t" >&5 echo $ECHO_N "checking for mode_t... $ECHO_C" >&6 if test "${ac_cv_have_mode_t+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 12241 "configure" +#line 12789 "configure" #include "confdefs.h" #include @@ -12252,16 +12800,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:12255: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:12803: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:12258: \$? = $ac_status" >&5 + echo "$as_me:12806: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:12261: \"$ac_try\"") >&5 + { (eval echo "$as_me:12809: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:12264: \$? = $ac_status" >&5 + echo "$as_me:12812: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_have_mode_t="yes" else @@ -12273,7 +12821,7 @@ rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:12276: result: $ac_cv_have_mode_t" >&5 +echo "$as_me:12824: result: $ac_cv_have_mode_t" >&5 echo "${ECHO_T}$ac_cv_have_mode_t" >&6 if test "x$ac_cv_have_mode_t" = "xyes" ; then cat >>confdefs.h <<\EOF @@ -12282,14 +12830,14 @@ fi -echo "$as_me:12285: checking for struct sockaddr_storage" >&5 +echo "$as_me:12833: checking for struct sockaddr_storage" >&5 echo $ECHO_N "checking for struct sockaddr_storage... $ECHO_C" >&6 if test "${ac_cv_have_struct_sockaddr_storage+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 12292 "configure" +#line 12840 "configure" #include "confdefs.h" #include @@ -12304,16 +12852,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:12307: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:12855: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:12310: \$? = $ac_status" >&5 + echo "$as_me:12858: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:12313: \"$ac_try\"") >&5 + { (eval echo "$as_me:12861: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:12316: \$? = $ac_status" >&5 + echo "$as_me:12864: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_have_struct_sockaddr_storage="yes" else @@ -12325,7 +12873,7 @@ rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:12328: result: $ac_cv_have_struct_sockaddr_storage" >&5 +echo "$as_me:12876: result: $ac_cv_have_struct_sockaddr_storage" >&5 echo "${ECHO_T}$ac_cv_have_struct_sockaddr_storage" >&6 if test "x$ac_cv_have_struct_sockaddr_storage" = "xyes" ; then cat >>confdefs.h <<\EOF @@ -12334,14 +12882,14 @@ fi -echo "$as_me:12337: checking for struct sockaddr_in6" >&5 +echo "$as_me:12885: checking for struct sockaddr_in6" >&5 echo $ECHO_N "checking for struct sockaddr_in6... $ECHO_C" >&6 if test "${ac_cv_have_struct_sockaddr_in6+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 12344 "configure" +#line 12892 "configure" #include "confdefs.h" #include @@ -12356,16 +12904,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:12359: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:12907: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:12362: \$? = $ac_status" >&5 + echo "$as_me:12910: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:12365: \"$ac_try\"") >&5 + { (eval echo "$as_me:12913: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:12368: \$? = $ac_status" >&5 + echo "$as_me:12916: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_have_struct_sockaddr_in6="yes" else @@ -12377,7 +12925,7 @@ rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:12380: result: $ac_cv_have_struct_sockaddr_in6" >&5 +echo "$as_me:12928: result: $ac_cv_have_struct_sockaddr_in6" >&5 echo "${ECHO_T}$ac_cv_have_struct_sockaddr_in6" >&6 if test "x$ac_cv_have_struct_sockaddr_in6" = "xyes" ; then cat >>confdefs.h <<\EOF @@ -12386,14 +12934,14 @@ fi -echo "$as_me:12389: checking for struct in6_addr" >&5 +echo "$as_me:12937: checking for struct in6_addr" >&5 echo $ECHO_N "checking for struct in6_addr... $ECHO_C" >&6 if test "${ac_cv_have_struct_in6_addr+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 12396 "configure" +#line 12944 "configure" #include "confdefs.h" #include @@ -12408,16 +12956,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:12411: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:12959: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:12414: \$? = $ac_status" >&5 + echo "$as_me:12962: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:12417: \"$ac_try\"") >&5 + { (eval echo "$as_me:12965: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:12420: \$? = $ac_status" >&5 + echo "$as_me:12968: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_have_struct_in6_addr="yes" else @@ -12429,7 +12977,7 @@ rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:12432: result: $ac_cv_have_struct_in6_addr" >&5 +echo "$as_me:12980: result: $ac_cv_have_struct_in6_addr" >&5 echo "${ECHO_T}$ac_cv_have_struct_in6_addr" >&6 if test "x$ac_cv_have_struct_in6_addr" = "xyes" ; then cat >>confdefs.h <<\EOF @@ -12438,14 +12986,14 @@ fi -echo "$as_me:12441: checking for struct addrinfo" >&5 +echo "$as_me:12989: checking for struct addrinfo" >&5 echo $ECHO_N "checking for struct addrinfo... $ECHO_C" >&6 if test "${ac_cv_have_struct_addrinfo+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 12448 "configure" +#line 12996 "configure" #include "confdefs.h" #include @@ -12461,16 +13009,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:12464: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:13012: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:12467: \$? = $ac_status" >&5 + echo "$as_me:13015: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:12470: \"$ac_try\"") >&5 + { (eval echo "$as_me:13018: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:12473: \$? = $ac_status" >&5 + echo "$as_me:13021: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_have_struct_addrinfo="yes" else @@ -12482,7 +13030,7 @@ rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:12485: result: $ac_cv_have_struct_addrinfo" >&5 +echo "$as_me:13033: result: $ac_cv_have_struct_addrinfo" >&5 echo "${ECHO_T}$ac_cv_have_struct_addrinfo" >&6 if test "x$ac_cv_have_struct_addrinfo" = "xyes" ; then cat >>confdefs.h <<\EOF @@ -12491,14 +13039,14 @@ fi -echo "$as_me:12494: checking for struct timeval" >&5 +echo "$as_me:13042: checking for struct timeval" >&5 echo $ECHO_N "checking for struct timeval... $ECHO_C" >&6 if test "${ac_cv_have_struct_timeval+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 12501 "configure" +#line 13049 "configure" #include "confdefs.h" #include int @@ -12510,16 +13058,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:12513: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:13061: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:12516: \$? = $ac_status" >&5 + echo "$as_me:13064: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:12519: \"$ac_try\"") >&5 + { (eval echo "$as_me:13067: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:12522: \$? = $ac_status" >&5 + echo "$as_me:13070: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_have_struct_timeval="yes" else @@ -12531,7 +13079,7 @@ rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:12534: result: $ac_cv_have_struct_timeval" >&5 +echo "$as_me:13082: result: $ac_cv_have_struct_timeval" >&5 echo "${ECHO_T}$ac_cv_have_struct_timeval" >&6 if test "x$ac_cv_have_struct_timeval" = "xyes" ; then cat >>confdefs.h <<\EOF @@ -12541,13 +13089,13 @@ have_struct_timeval=1 fi -echo "$as_me:12544: checking for struct timespec" >&5 +echo "$as_me:13092: checking for struct timespec" >&5 echo $ECHO_N "checking for struct timespec... $ECHO_C" >&6 if test "${ac_cv_type_struct_timespec+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 12550 "configure" +#line 13098 "configure" #include "confdefs.h" $ac_includes_default int @@ -12562,16 +13110,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:12565: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:13113: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:12568: \$? = $ac_status" >&5 + echo "$as_me:13116: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:12571: \"$ac_try\"") >&5 + { (eval echo "$as_me:13119: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:12574: \$? = $ac_status" >&5 + echo "$as_me:13122: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_type_struct_timespec=yes else @@ -12581,7 +13129,7 @@ fi rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:12584: result: $ac_cv_type_struct_timespec" >&5 +echo "$as_me:13132: result: $ac_cv_type_struct_timespec" >&5 echo "${ECHO_T}$ac_cv_type_struct_timespec" >&6 if test $ac_cv_type_struct_timespec = yes; then @@ -12601,12 +13149,12 @@ exit 1; else if test "$cross_compiling" = yes; then - { { echo "$as_me:12604: error: cannot run test program while cross compiling" >&5 + { { echo "$as_me:13152: error: cannot run test program while cross compiling" >&5 echo "$as_me: error: cannot run test program while cross compiling" >&2;} { (exit 1); exit 1; }; } else cat >conftest.$ac_ext <<_ACEOF -#line 12609 "configure" +#line 13157 "configure" #include "confdefs.h" #include @@ -12625,7 +13173,7 @@ strcpy(expected_out, "9223372036854775807"); snprintf(buf, mazsize, "%lld", num); if(strcmp(buf, expected_out) != 0) - exit(1); + exit(1); exit(0); } #else @@ -12634,15 +13182,15 @@ _ACEOF rm -f conftest$ac_exeext -if { (eval echo "$as_me:12637: \"$ac_link\"") >&5 +if { (eval echo "$as_me:13185: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:12640: \$? = $ac_status" >&5 + echo "$as_me:13188: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='./conftest$ac_exeext' - { (eval echo "$as_me:12642: \"$ac_try\"") >&5 + { (eval echo "$as_me:13190: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:12645: \$? = $ac_status" >&5 + echo "$as_me:13193: \$? = $ac_status" >&5 (exit $ac_status); }; }; then true else @@ -12661,14 +13209,14 @@ # look for field 'ut_host' in header 'utmp.h' ossh_safe=`echo "utmp.h" | sed 'y%./+-%__p_%'` ossh_varname="ossh_cv_$ossh_safe""_has_"ut_host - echo "$as_me:12664: checking for ut_host field in utmp.h" >&5 + echo "$as_me:13212: checking for ut_host field in utmp.h" >&5 echo $ECHO_N "checking for ut_host field in utmp.h... $ECHO_C" >&6 if eval "test \"\${$ossh_varname+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 12671 "configure" +#line 13219 "configure" #include "confdefs.h" #include @@ -12685,7 +13233,7 @@ ossh_result=`eval 'echo $'"$ossh_varname"` if test -n "`echo $ossh_varname`"; then - echo "$as_me:12688: result: $ossh_result" >&5 + echo "$as_me:13236: result: $ossh_result" >&5 echo "${ECHO_T}$ossh_result" >&6 if test "x$ossh_result" = "xyes"; then cat >>confdefs.h <<\EOF @@ -12694,21 +13242,21 @@ fi else - echo "$as_me:12697: result: no" >&5 + echo "$as_me:13245: result: no" >&5 echo "${ECHO_T}no" >&6 fi # look for field 'ut_host' in header 'utmpx.h' ossh_safe=`echo "utmpx.h" | sed 'y%./+-%__p_%'` ossh_varname="ossh_cv_$ossh_safe""_has_"ut_host - echo "$as_me:12704: checking for ut_host field in utmpx.h" >&5 + echo "$as_me:13252: checking for ut_host field in utmpx.h" >&5 echo $ECHO_N "checking for ut_host field in utmpx.h... $ECHO_C" >&6 if eval "test \"\${$ossh_varname+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 12711 "configure" +#line 13259 "configure" #include "confdefs.h" #include @@ -12725,7 +13273,7 @@ ossh_result=`eval 'echo $'"$ossh_varname"` if test -n "`echo $ossh_varname`"; then - echo "$as_me:12728: result: $ossh_result" >&5 + echo "$as_me:13276: result: $ossh_result" >&5 echo "${ECHO_T}$ossh_result" >&6 if test "x$ossh_result" = "xyes"; then cat >>confdefs.h <<\EOF @@ -12734,21 +13282,21 @@ fi else - echo "$as_me:12737: result: no" >&5 + echo "$as_me:13285: result: no" >&5 echo "${ECHO_T}no" >&6 fi # look for field 'syslen' in header 'utmpx.h' ossh_safe=`echo "utmpx.h" | sed 'y%./+-%__p_%'` ossh_varname="ossh_cv_$ossh_safe""_has_"syslen - echo "$as_me:12744: checking for syslen field in utmpx.h" >&5 + echo "$as_me:13292: checking for syslen field in utmpx.h" >&5 echo $ECHO_N "checking for syslen field in utmpx.h... $ECHO_C" >&6 if eval "test \"\${$ossh_varname+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 12751 "configure" +#line 13299 "configure" #include "confdefs.h" #include @@ -12765,7 +13313,7 @@ ossh_result=`eval 'echo $'"$ossh_varname"` if test -n "`echo $ossh_varname`"; then - echo "$as_me:12768: result: $ossh_result" >&5 + echo "$as_me:13316: result: $ossh_result" >&5 echo "${ECHO_T}$ossh_result" >&6 if test "x$ossh_result" = "xyes"; then cat >>confdefs.h <<\EOF @@ -12774,21 +13322,21 @@ fi else - echo "$as_me:12777: result: no" >&5 + echo "$as_me:13325: result: no" >&5 echo "${ECHO_T}no" >&6 fi # look for field 'ut_pid' in header 'utmp.h' ossh_safe=`echo "utmp.h" | sed 'y%./+-%__p_%'` ossh_varname="ossh_cv_$ossh_safe""_has_"ut_pid - echo "$as_me:12784: checking for ut_pid field in utmp.h" >&5 + echo "$as_me:13332: checking for ut_pid field in utmp.h" >&5 echo $ECHO_N "checking for ut_pid field in utmp.h... $ECHO_C" >&6 if eval "test \"\${$ossh_varname+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 12791 "configure" +#line 13339 "configure" #include "confdefs.h" #include @@ -12805,7 +13353,7 @@ ossh_result=`eval 'echo $'"$ossh_varname"` if test -n "`echo $ossh_varname`"; then - echo "$as_me:12808: result: $ossh_result" >&5 + echo "$as_me:13356: result: $ossh_result" >&5 echo "${ECHO_T}$ossh_result" >&6 if test "x$ossh_result" = "xyes"; then cat >>confdefs.h <<\EOF @@ -12814,21 +13362,21 @@ fi else - echo "$as_me:12817: result: no" >&5 + echo "$as_me:13365: result: no" >&5 echo "${ECHO_T}no" >&6 fi # look for field 'ut_type' in header 'utmp.h' ossh_safe=`echo "utmp.h" | sed 'y%./+-%__p_%'` ossh_varname="ossh_cv_$ossh_safe""_has_"ut_type - echo "$as_me:12824: checking for ut_type field in utmp.h" >&5 + echo "$as_me:13372: checking for ut_type field in utmp.h" >&5 echo $ECHO_N "checking for ut_type field in utmp.h... $ECHO_C" >&6 if eval "test \"\${$ossh_varname+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 12831 "configure" +#line 13379 "configure" #include "confdefs.h" #include @@ -12845,7 +13393,7 @@ ossh_result=`eval 'echo $'"$ossh_varname"` if test -n "`echo $ossh_varname`"; then - echo "$as_me:12848: result: $ossh_result" >&5 + echo "$as_me:13396: result: $ossh_result" >&5 echo "${ECHO_T}$ossh_result" >&6 if test "x$ossh_result" = "xyes"; then cat >>confdefs.h <<\EOF @@ -12854,21 +13402,21 @@ fi else - echo "$as_me:12857: result: no" >&5 + echo "$as_me:13405: result: no" >&5 echo "${ECHO_T}no" >&6 fi # look for field 'ut_type' in header 'utmpx.h' ossh_safe=`echo "utmpx.h" | sed 'y%./+-%__p_%'` ossh_varname="ossh_cv_$ossh_safe""_has_"ut_type - echo "$as_me:12864: checking for ut_type field in utmpx.h" >&5 + echo "$as_me:13412: checking for ut_type field in utmpx.h" >&5 echo $ECHO_N "checking for ut_type field in utmpx.h... $ECHO_C" >&6 if eval "test \"\${$ossh_varname+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 12871 "configure" +#line 13419 "configure" #include "confdefs.h" #include @@ -12885,7 +13433,7 @@ ossh_result=`eval 'echo $'"$ossh_varname"` if test -n "`echo $ossh_varname`"; then - echo "$as_me:12888: result: $ossh_result" >&5 + echo "$as_me:13436: result: $ossh_result" >&5 echo "${ECHO_T}$ossh_result" >&6 if test "x$ossh_result" = "xyes"; then cat >>confdefs.h <<\EOF @@ -12894,21 +13442,21 @@ fi else - echo "$as_me:12897: result: no" >&5 + echo "$as_me:13445: result: no" >&5 echo "${ECHO_T}no" >&6 fi # look for field 'ut_tv' in header 'utmp.h' ossh_safe=`echo "utmp.h" | sed 'y%./+-%__p_%'` ossh_varname="ossh_cv_$ossh_safe""_has_"ut_tv - echo "$as_me:12904: checking for ut_tv field in utmp.h" >&5 + echo "$as_me:13452: checking for ut_tv field in utmp.h" >&5 echo $ECHO_N "checking for ut_tv field in utmp.h... $ECHO_C" >&6 if eval "test \"\${$ossh_varname+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 12911 "configure" +#line 13459 "configure" #include "confdefs.h" #include @@ -12925,7 +13473,7 @@ ossh_result=`eval 'echo $'"$ossh_varname"` if test -n "`echo $ossh_varname`"; then - echo "$as_me:12928: result: $ossh_result" >&5 + echo "$as_me:13476: result: $ossh_result" >&5 echo "${ECHO_T}$ossh_result" >&6 if test "x$ossh_result" = "xyes"; then cat >>confdefs.h <<\EOF @@ -12934,21 +13482,21 @@ fi else - echo "$as_me:12937: result: no" >&5 + echo "$as_me:13485: result: no" >&5 echo "${ECHO_T}no" >&6 fi # look for field 'ut_id' in header 'utmp.h' ossh_safe=`echo "utmp.h" | sed 'y%./+-%__p_%'` ossh_varname="ossh_cv_$ossh_safe""_has_"ut_id - echo "$as_me:12944: checking for ut_id field in utmp.h" >&5 + echo "$as_me:13492: checking for ut_id field in utmp.h" >&5 echo $ECHO_N "checking for ut_id field in utmp.h... $ECHO_C" >&6 if eval "test \"\${$ossh_varname+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 12951 "configure" +#line 13499 "configure" #include "confdefs.h" #include @@ -12965,7 +13513,7 @@ ossh_result=`eval 'echo $'"$ossh_varname"` if test -n "`echo $ossh_varname`"; then - echo "$as_me:12968: result: $ossh_result" >&5 + echo "$as_me:13516: result: $ossh_result" >&5 echo "${ECHO_T}$ossh_result" >&6 if test "x$ossh_result" = "xyes"; then cat >>confdefs.h <<\EOF @@ -12974,21 +13522,21 @@ fi else - echo "$as_me:12977: result: no" >&5 + echo "$as_me:13525: result: no" >&5 echo "${ECHO_T}no" >&6 fi # look for field 'ut_id' in header 'utmpx.h' ossh_safe=`echo "utmpx.h" | sed 'y%./+-%__p_%'` ossh_varname="ossh_cv_$ossh_safe""_has_"ut_id - echo "$as_me:12984: checking for ut_id field in utmpx.h" >&5 + echo "$as_me:13532: checking for ut_id field in utmpx.h" >&5 echo $ECHO_N "checking for ut_id field in utmpx.h... $ECHO_C" >&6 if eval "test \"\${$ossh_varname+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 12991 "configure" +#line 13539 "configure" #include "confdefs.h" #include @@ -13005,7 +13553,7 @@ ossh_result=`eval 'echo $'"$ossh_varname"` if test -n "`echo $ossh_varname`"; then - echo "$as_me:13008: result: $ossh_result" >&5 + echo "$as_me:13556: result: $ossh_result" >&5 echo "${ECHO_T}$ossh_result" >&6 if test "x$ossh_result" = "xyes"; then cat >>confdefs.h <<\EOF @@ -13014,21 +13562,21 @@ fi else - echo "$as_me:13017: result: no" >&5 + echo "$as_me:13565: result: no" >&5 echo "${ECHO_T}no" >&6 fi # look for field 'ut_addr' in header 'utmp.h' ossh_safe=`echo "utmp.h" | sed 'y%./+-%__p_%'` ossh_varname="ossh_cv_$ossh_safe""_has_"ut_addr - echo "$as_me:13024: checking for ut_addr field in utmp.h" >&5 + echo "$as_me:13572: checking for ut_addr field in utmp.h" >&5 echo $ECHO_N "checking for ut_addr field in utmp.h... $ECHO_C" >&6 if eval "test \"\${$ossh_varname+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 13031 "configure" +#line 13579 "configure" #include "confdefs.h" #include @@ -13045,7 +13593,7 @@ ossh_result=`eval 'echo $'"$ossh_varname"` if test -n "`echo $ossh_varname`"; then - echo "$as_me:13048: result: $ossh_result" >&5 + echo "$as_me:13596: result: $ossh_result" >&5 echo "${ECHO_T}$ossh_result" >&6 if test "x$ossh_result" = "xyes"; then cat >>confdefs.h <<\EOF @@ -13054,21 +13602,21 @@ fi else - echo "$as_me:13057: result: no" >&5 + echo "$as_me:13605: result: no" >&5 echo "${ECHO_T}no" >&6 fi # look for field 'ut_addr' in header 'utmpx.h' ossh_safe=`echo "utmpx.h" | sed 'y%./+-%__p_%'` ossh_varname="ossh_cv_$ossh_safe""_has_"ut_addr - echo "$as_me:13064: checking for ut_addr field in utmpx.h" >&5 + echo "$as_me:13612: checking for ut_addr field in utmpx.h" >&5 echo $ECHO_N "checking for ut_addr field in utmpx.h... $ECHO_C" >&6 if eval "test \"\${$ossh_varname+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 13071 "configure" +#line 13619 "configure" #include "confdefs.h" #include @@ -13085,7 +13633,7 @@ ossh_result=`eval 'echo $'"$ossh_varname"` if test -n "`echo $ossh_varname`"; then - echo "$as_me:13088: result: $ossh_result" >&5 + echo "$as_me:13636: result: $ossh_result" >&5 echo "${ECHO_T}$ossh_result" >&6 if test "x$ossh_result" = "xyes"; then cat >>confdefs.h <<\EOF @@ -13094,21 +13642,21 @@ fi else - echo "$as_me:13097: result: no" >&5 + echo "$as_me:13645: result: no" >&5 echo "${ECHO_T}no" >&6 fi # look for field 'ut_addr_v6' in header 'utmp.h' ossh_safe=`echo "utmp.h" | sed 'y%./+-%__p_%'` ossh_varname="ossh_cv_$ossh_safe""_has_"ut_addr_v6 - echo "$as_me:13104: checking for ut_addr_v6 field in utmp.h" >&5 + echo "$as_me:13652: checking for ut_addr_v6 field in utmp.h" >&5 echo $ECHO_N "checking for ut_addr_v6 field in utmp.h... $ECHO_C" >&6 if eval "test \"\${$ossh_varname+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 13111 "configure" +#line 13659 "configure" #include "confdefs.h" #include @@ -13125,7 +13673,7 @@ ossh_result=`eval 'echo $'"$ossh_varname"` if test -n "`echo $ossh_varname`"; then - echo "$as_me:13128: result: $ossh_result" >&5 + echo "$as_me:13676: result: $ossh_result" >&5 echo "${ECHO_T}$ossh_result" >&6 if test "x$ossh_result" = "xyes"; then cat >>confdefs.h <<\EOF @@ -13134,21 +13682,21 @@ fi else - echo "$as_me:13137: result: no" >&5 + echo "$as_me:13685: result: no" >&5 echo "${ECHO_T}no" >&6 fi # look for field 'ut_addr_v6' in header 'utmpx.h' ossh_safe=`echo "utmpx.h" | sed 'y%./+-%__p_%'` ossh_varname="ossh_cv_$ossh_safe""_has_"ut_addr_v6 - echo "$as_me:13144: checking for ut_addr_v6 field in utmpx.h" >&5 + echo "$as_me:13692: checking for ut_addr_v6 field in utmpx.h" >&5 echo $ECHO_N "checking for ut_addr_v6 field in utmpx.h... $ECHO_C" >&6 if eval "test \"\${$ossh_varname+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 13151 "configure" +#line 13699 "configure" #include "confdefs.h" #include @@ -13165,7 +13713,7 @@ ossh_result=`eval 'echo $'"$ossh_varname"` if test -n "`echo $ossh_varname`"; then - echo "$as_me:13168: result: $ossh_result" >&5 + echo "$as_me:13716: result: $ossh_result" >&5 echo "${ECHO_T}$ossh_result" >&6 if test "x$ossh_result" = "xyes"; then cat >>confdefs.h <<\EOF @@ -13174,21 +13722,21 @@ fi else - echo "$as_me:13177: result: no" >&5 + echo "$as_me:13725: result: no" >&5 echo "${ECHO_T}no" >&6 fi # look for field 'ut_exit' in header 'utmp.h' ossh_safe=`echo "utmp.h" | sed 'y%./+-%__p_%'` ossh_varname="ossh_cv_$ossh_safe""_has_"ut_exit - echo "$as_me:13184: checking for ut_exit field in utmp.h" >&5 + echo "$as_me:13732: checking for ut_exit field in utmp.h" >&5 echo $ECHO_N "checking for ut_exit field in utmp.h... $ECHO_C" >&6 if eval "test \"\${$ossh_varname+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 13191 "configure" +#line 13739 "configure" #include "confdefs.h" #include @@ -13205,7 +13753,7 @@ ossh_result=`eval 'echo $'"$ossh_varname"` if test -n "`echo $ossh_varname`"; then - echo "$as_me:13208: result: $ossh_result" >&5 + echo "$as_me:13756: result: $ossh_result" >&5 echo "${ECHO_T}$ossh_result" >&6 if test "x$ossh_result" = "xyes"; then cat >>confdefs.h <<\EOF @@ -13214,21 +13762,21 @@ fi else - echo "$as_me:13217: result: no" >&5 + echo "$as_me:13765: result: no" >&5 echo "${ECHO_T}no" >&6 fi # look for field 'ut_time' in header 'utmp.h' ossh_safe=`echo "utmp.h" | sed 'y%./+-%__p_%'` ossh_varname="ossh_cv_$ossh_safe""_has_"ut_time - echo "$as_me:13224: checking for ut_time field in utmp.h" >&5 + echo "$as_me:13772: checking for ut_time field in utmp.h" >&5 echo $ECHO_N "checking for ut_time field in utmp.h... $ECHO_C" >&6 if eval "test \"\${$ossh_varname+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 13231 "configure" +#line 13779 "configure" #include "confdefs.h" #include @@ -13245,7 +13793,7 @@ ossh_result=`eval 'echo $'"$ossh_varname"` if test -n "`echo $ossh_varname`"; then - echo "$as_me:13248: result: $ossh_result" >&5 + echo "$as_me:13796: result: $ossh_result" >&5 echo "${ECHO_T}$ossh_result" >&6 if test "x$ossh_result" = "xyes"; then cat >>confdefs.h <<\EOF @@ -13254,21 +13802,21 @@ fi else - echo "$as_me:13257: result: no" >&5 + echo "$as_me:13805: result: no" >&5 echo "${ECHO_T}no" >&6 fi # look for field 'ut_time' in header 'utmpx.h' ossh_safe=`echo "utmpx.h" | sed 'y%./+-%__p_%'` ossh_varname="ossh_cv_$ossh_safe""_has_"ut_time - echo "$as_me:13264: checking for ut_time field in utmpx.h" >&5 + echo "$as_me:13812: checking for ut_time field in utmpx.h" >&5 echo $ECHO_N "checking for ut_time field in utmpx.h... $ECHO_C" >&6 if eval "test \"\${$ossh_varname+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 13271 "configure" +#line 13819 "configure" #include "confdefs.h" #include @@ -13285,7 +13833,7 @@ ossh_result=`eval 'echo $'"$ossh_varname"` if test -n "`echo $ossh_varname`"; then - echo "$as_me:13288: result: $ossh_result" >&5 + echo "$as_me:13836: result: $ossh_result" >&5 echo "${ECHO_T}$ossh_result" >&6 if test "x$ossh_result" = "xyes"; then cat >>confdefs.h <<\EOF @@ -13294,21 +13842,21 @@ fi else - echo "$as_me:13297: result: no" >&5 + echo "$as_me:13845: result: no" >&5 echo "${ECHO_T}no" >&6 fi # look for field 'ut_tv' in header 'utmpx.h' ossh_safe=`echo "utmpx.h" | sed 'y%./+-%__p_%'` ossh_varname="ossh_cv_$ossh_safe""_has_"ut_tv - echo "$as_me:13304: checking for ut_tv field in utmpx.h" >&5 + echo "$as_me:13852: checking for ut_tv field in utmpx.h" >&5 echo $ECHO_N "checking for ut_tv field in utmpx.h... $ECHO_C" >&6 if eval "test \"\${$ossh_varname+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 13311 "configure" +#line 13859 "configure" #include "confdefs.h" #include @@ -13325,7 +13873,7 @@ ossh_result=`eval 'echo $'"$ossh_varname"` if test -n "`echo $ossh_varname`"; then - echo "$as_me:13328: result: $ossh_result" >&5 + echo "$as_me:13876: result: $ossh_result" >&5 echo "${ECHO_T}$ossh_result" >&6 if test "x$ossh_result" = "xyes"; then cat >>confdefs.h <<\EOF @@ -13334,17 +13882,17 @@ fi else - echo "$as_me:13337: result: no" >&5 + echo "$as_me:13885: result: no" >&5 echo "${ECHO_T}no" >&6 fi -echo "$as_me:13341: checking for struct stat.st_blksize" >&5 +echo "$as_me:13889: checking for struct stat.st_blksize" >&5 echo $ECHO_N "checking for struct stat.st_blksize... $ECHO_C" >&6 if test "${ac_cv_member_struct_stat_st_blksize+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 13347 "configure" +#line 13895 "configure" #include "confdefs.h" $ac_includes_default int @@ -13358,16 +13906,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:13361: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:13909: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:13364: \$? = $ac_status" >&5 + echo "$as_me:13912: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:13367: \"$ac_try\"") >&5 + { (eval echo "$as_me:13915: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:13370: \$? = $ac_status" >&5 + echo "$as_me:13918: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_member_struct_stat_st_blksize=yes else @@ -13377,7 +13925,7 @@ fi rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:13380: result: $ac_cv_member_struct_stat_st_blksize" >&5 +echo "$as_me:13928: result: $ac_cv_member_struct_stat_st_blksize" >&5 echo "${ECHO_T}$ac_cv_member_struct_stat_st_blksize" >&6 if test $ac_cv_member_struct_stat_st_blksize = yes; then @@ -13387,14 +13935,14 @@ fi -echo "$as_me:13390: checking for ss_family field in struct sockaddr_storage" >&5 +echo "$as_me:13938: checking for ss_family field in struct sockaddr_storage" >&5 echo $ECHO_N "checking for ss_family field in struct sockaddr_storage... $ECHO_C" >&6 if test "${ac_cv_have_ss_family_in_struct_ss+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 13397 "configure" +#line 13945 "configure" #include "confdefs.h" #include @@ -13409,16 +13957,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:13412: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:13960: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:13415: \$? = $ac_status" >&5 + echo "$as_me:13963: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:13418: \"$ac_try\"") >&5 + { (eval echo "$as_me:13966: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:13421: \$? = $ac_status" >&5 + echo "$as_me:13969: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_have_ss_family_in_struct_ss="yes" else @@ -13429,7 +13977,7 @@ rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:13432: result: $ac_cv_have_ss_family_in_struct_ss" >&5 +echo "$as_me:13980: result: $ac_cv_have_ss_family_in_struct_ss" >&5 echo "${ECHO_T}$ac_cv_have_ss_family_in_struct_ss" >&6 if test "x$ac_cv_have_ss_family_in_struct_ss" = "xyes" ; then cat >>confdefs.h <<\EOF @@ -13438,14 +13986,14 @@ fi -echo "$as_me:13441: checking for __ss_family field in struct sockaddr_storage" >&5 +echo "$as_me:13989: checking for __ss_family field in struct sockaddr_storage" >&5 echo $ECHO_N "checking for __ss_family field in struct sockaddr_storage... $ECHO_C" >&6 if test "${ac_cv_have___ss_family_in_struct_ss+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 13448 "configure" +#line 13996 "configure" #include "confdefs.h" #include @@ -13460,16 +14008,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:13463: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:14011: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:13466: \$? = $ac_status" >&5 + echo "$as_me:14014: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:13469: \"$ac_try\"") >&5 + { (eval echo "$as_me:14017: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:13472: \$? = $ac_status" >&5 + echo "$as_me:14020: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_have___ss_family_in_struct_ss="yes" else @@ -13481,7 +14029,7 @@ rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:13484: result: $ac_cv_have___ss_family_in_struct_ss" >&5 +echo "$as_me:14032: result: $ac_cv_have___ss_family_in_struct_ss" >&5 echo "${ECHO_T}$ac_cv_have___ss_family_in_struct_ss" >&6 if test "x$ac_cv_have___ss_family_in_struct_ss" = "xyes" ; then cat >>confdefs.h <<\EOF @@ -13490,14 +14038,14 @@ fi -echo "$as_me:13493: checking for pw_class field in struct passwd" >&5 +echo "$as_me:14041: checking for pw_class field in struct passwd" >&5 echo $ECHO_N "checking for pw_class field in struct passwd... $ECHO_C" >&6 if test "${ac_cv_have_pw_class_in_struct_passwd+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 13500 "configure" +#line 14048 "configure" #include "confdefs.h" #include @@ -13511,16 +14059,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:13514: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:14062: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:13517: \$? = $ac_status" >&5 + echo "$as_me:14065: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:13520: \"$ac_try\"") >&5 + { (eval echo "$as_me:14068: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:13523: \$? = $ac_status" >&5 + echo "$as_me:14071: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_have_pw_class_in_struct_passwd="yes" else @@ -13532,7 +14080,7 @@ rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:13535: result: $ac_cv_have_pw_class_in_struct_passwd" >&5 +echo "$as_me:14083: result: $ac_cv_have_pw_class_in_struct_passwd" >&5 echo "${ECHO_T}$ac_cv_have_pw_class_in_struct_passwd" >&6 if test "x$ac_cv_have_pw_class_in_struct_passwd" = "xyes" ; then cat >>confdefs.h <<\EOF @@ -13541,14 +14089,14 @@ fi -echo "$as_me:13544: checking for pw_expire field in struct passwd" >&5 +echo "$as_me:14092: checking for pw_expire field in struct passwd" >&5 echo $ECHO_N "checking for pw_expire field in struct passwd... $ECHO_C" >&6 if test "${ac_cv_have_pw_expire_in_struct_passwd+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 13551 "configure" +#line 14099 "configure" #include "confdefs.h" #include @@ -13562,16 +14110,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:13565: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:14113: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:13568: \$? = $ac_status" >&5 + echo "$as_me:14116: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:13571: \"$ac_try\"") >&5 + { (eval echo "$as_me:14119: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:13574: \$? = $ac_status" >&5 + echo "$as_me:14122: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_have_pw_expire_in_struct_passwd="yes" else @@ -13583,7 +14131,7 @@ rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:13586: result: $ac_cv_have_pw_expire_in_struct_passwd" >&5 +echo "$as_me:14134: result: $ac_cv_have_pw_expire_in_struct_passwd" >&5 echo "${ECHO_T}$ac_cv_have_pw_expire_in_struct_passwd" >&6 if test "x$ac_cv_have_pw_expire_in_struct_passwd" = "xyes" ; then cat >>confdefs.h <<\EOF @@ -13592,14 +14140,14 @@ fi -echo "$as_me:13595: checking for pw_change field in struct passwd" >&5 +echo "$as_me:14143: checking for pw_change field in struct passwd" >&5 echo $ECHO_N "checking for pw_change field in struct passwd... $ECHO_C" >&6 if test "${ac_cv_have_pw_change_in_struct_passwd+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 13602 "configure" +#line 14150 "configure" #include "confdefs.h" #include @@ -13613,16 +14161,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:13616: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:14164: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:13619: \$? = $ac_status" >&5 + echo "$as_me:14167: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:13622: \"$ac_try\"") >&5 + { (eval echo "$as_me:14170: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:13625: \$? = $ac_status" >&5 + echo "$as_me:14173: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_have_pw_change_in_struct_passwd="yes" else @@ -13634,7 +14182,7 @@ rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:13637: result: $ac_cv_have_pw_change_in_struct_passwd" >&5 +echo "$as_me:14185: result: $ac_cv_have_pw_change_in_struct_passwd" >&5 echo "${ECHO_T}$ac_cv_have_pw_change_in_struct_passwd" >&6 if test "x$ac_cv_have_pw_change_in_struct_passwd" = "xyes" ; then cat >>confdefs.h <<\EOF @@ -13643,19 +14191,19 @@ fi -echo "$as_me:13646: checking for msg_accrights field in struct msghdr" >&5 +echo "$as_me:14194: checking for msg_accrights field in struct msghdr" >&5 echo $ECHO_N "checking for msg_accrights field in struct msghdr... $ECHO_C" >&6 if test "${ac_cv_have_accrights_in_msghdr+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else if test "$cross_compiling" = yes; then - { { echo "$as_me:13653: error: cannot run test program while cross compiling" >&5 + { { echo "$as_me:14201: error: cannot run test program while cross compiling" >&5 echo "$as_me: error: cannot run test program while cross compiling" >&2;} { (exit 1); exit 1; }; } else cat >conftest.$ac_ext <<_ACEOF -#line 13658 "configure" +#line 14206 "configure" #include "confdefs.h" #include @@ -13672,15 +14220,15 @@ _ACEOF rm -f conftest$ac_exeext -if { (eval echo "$as_me:13675: \"$ac_link\"") >&5 +if { (eval echo "$as_me:14223: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:13678: \$? = $ac_status" >&5 + echo "$as_me:14226: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='./conftest$ac_exeext' - { (eval echo "$as_me:13680: \"$ac_try\"") >&5 + { (eval echo "$as_me:14228: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:13683: \$? = $ac_status" >&5 + echo "$as_me:14231: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_have_accrights_in_msghdr="yes" else @@ -13694,7 +14242,7 @@ fi fi -echo "$as_me:13697: result: $ac_cv_have_accrights_in_msghdr" >&5 +echo "$as_me:14245: result: $ac_cv_have_accrights_in_msghdr" >&5 echo "${ECHO_T}$ac_cv_have_accrights_in_msghdr" >&6 if test "x$ac_cv_have_accrights_in_msghdr" = "xyes" ; then cat >>confdefs.h <<\EOF @@ -13703,19 +14251,19 @@ fi -echo "$as_me:13706: checking for msg_control field in struct msghdr" >&5 +echo "$as_me:14254: checking for msg_control field in struct msghdr" >&5 echo $ECHO_N "checking for msg_control field in struct msghdr... $ECHO_C" >&6 if test "${ac_cv_have_control_in_msghdr+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else if test "$cross_compiling" = yes; then - { { echo "$as_me:13713: error: cannot run test program while cross compiling" >&5 + { { echo "$as_me:14261: error: cannot run test program while cross compiling" >&5 echo "$as_me: error: cannot run test program while cross compiling" >&2;} { (exit 1); exit 1; }; } else cat >conftest.$ac_ext <<_ACEOF -#line 13718 "configure" +#line 14266 "configure" #include "confdefs.h" #include @@ -13732,15 +14280,15 @@ _ACEOF rm -f conftest$ac_exeext -if { (eval echo "$as_me:13735: \"$ac_link\"") >&5 +if { (eval echo "$as_me:14283: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:13738: \$? = $ac_status" >&5 + echo "$as_me:14286: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='./conftest$ac_exeext' - { (eval echo "$as_me:13740: \"$ac_try\"") >&5 + { (eval echo "$as_me:14288: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:13743: \$? = $ac_status" >&5 + echo "$as_me:14291: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_have_control_in_msghdr="yes" else @@ -13754,7 +14302,7 @@ fi fi -echo "$as_me:13757: result: $ac_cv_have_control_in_msghdr" >&5 +echo "$as_me:14305: result: $ac_cv_have_control_in_msghdr" >&5 echo "${ECHO_T}$ac_cv_have_control_in_msghdr" >&6 if test "x$ac_cv_have_control_in_msghdr" = "xyes" ; then cat >>confdefs.h <<\EOF @@ -13763,14 +14311,14 @@ fi -echo "$as_me:13766: checking if libc defines __progname" >&5 +echo "$as_me:14314: checking if libc defines __progname" >&5 echo $ECHO_N "checking if libc defines __progname... $ECHO_C" >&6 if test "${ac_cv_libc_defines___progname+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 13773 "configure" +#line 14321 "configure" #include "confdefs.h" int @@ -13782,16 +14330,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:13785: \"$ac_link\"") >&5 +if { (eval echo "$as_me:14333: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:13788: \$? = $ac_status" >&5 + echo "$as_me:14336: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:13791: \"$ac_try\"") >&5 + { (eval echo "$as_me:14339: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:13794: \$? = $ac_status" >&5 + echo "$as_me:14342: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_libc_defines___progname="yes" else @@ -13803,7 +14351,7 @@ rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:13806: result: $ac_cv_libc_defines___progname" >&5 +echo "$as_me:14354: result: $ac_cv_libc_defines___progname" >&5 echo "${ECHO_T}$ac_cv_libc_defines___progname" >&6 if test "x$ac_cv_libc_defines___progname" = "xyes" ; then cat >>confdefs.h <<\EOF @@ -13812,14 +14360,14 @@ fi -echo "$as_me:13815: checking whether $CC implements __FUNCTION__" >&5 +echo "$as_me:14363: checking whether $CC implements __FUNCTION__" >&5 echo $ECHO_N "checking whether $CC implements __FUNCTION__... $ECHO_C" >&6 if test "${ac_cv_cc_implements___FUNCTION__+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 13822 "configure" +#line 14370 "configure" #include "confdefs.h" #include @@ -13833,16 +14381,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:13836: \"$ac_link\"") >&5 +if { (eval echo "$as_me:14384: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:13839: \$? = $ac_status" >&5 + echo "$as_me:14387: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:13842: \"$ac_try\"") >&5 + { (eval echo "$as_me:14390: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:13845: \$? = $ac_status" >&5 + echo "$as_me:14393: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_cc_implements___FUNCTION__="yes" else @@ -13854,7 +14402,7 @@ rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:13857: result: $ac_cv_cc_implements___FUNCTION__" >&5 +echo "$as_me:14405: result: $ac_cv_cc_implements___FUNCTION__" >&5 echo "${ECHO_T}$ac_cv_cc_implements___FUNCTION__" >&6 if test "x$ac_cv_cc_implements___FUNCTION__" = "xyes" ; then cat >>confdefs.h <<\EOF @@ -13863,14 +14411,14 @@ fi -echo "$as_me:13866: checking whether $CC implements __func__" >&5 +echo "$as_me:14414: checking whether $CC implements __func__" >&5 echo $ECHO_N "checking whether $CC implements __func__... $ECHO_C" >&6 if test "${ac_cv_cc_implements___func__+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 13873 "configure" +#line 14421 "configure" #include "confdefs.h" #include @@ -13884,16 +14432,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:13887: \"$ac_link\"") >&5 +if { (eval echo "$as_me:14435: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:13890: \$? = $ac_status" >&5 + echo "$as_me:14438: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:13893: \"$ac_try\"") >&5 + { (eval echo "$as_me:14441: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:13896: \$? = $ac_status" >&5 + echo "$as_me:14444: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_cc_implements___func__="yes" else @@ -13905,7 +14453,7 @@ rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:13908: result: $ac_cv_cc_implements___func__" >&5 +echo "$as_me:14456: result: $ac_cv_cc_implements___func__" >&5 echo "${ECHO_T}$ac_cv_cc_implements___func__" >&6 if test "x$ac_cv_cc_implements___func__" = "xyes" ; then cat >>confdefs.h <<\EOF @@ -13914,14 +14462,14 @@ fi -echo "$as_me:13917: checking whether getopt has optreset support" >&5 +echo "$as_me:14465: checking whether getopt has optreset support" >&5 echo $ECHO_N "checking whether getopt has optreset support... $ECHO_C" >&6 if test "${ac_cv_have_getopt_optreset+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 13924 "configure" +#line 14472 "configure" #include "confdefs.h" #include @@ -13935,16 +14483,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:13938: \"$ac_link\"") >&5 +if { (eval echo "$as_me:14486: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:13941: \$? = $ac_status" >&5 + echo "$as_me:14489: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:13944: \"$ac_try\"") >&5 + { (eval echo "$as_me:14492: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:13947: \$? = $ac_status" >&5 + echo "$as_me:14495: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_have_getopt_optreset="yes" else @@ -13956,7 +14504,7 @@ rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:13959: result: $ac_cv_have_getopt_optreset" >&5 +echo "$as_me:14507: result: $ac_cv_have_getopt_optreset" >&5 echo "${ECHO_T}$ac_cv_have_getopt_optreset" >&6 if test "x$ac_cv_have_getopt_optreset" = "xyes" ; then cat >>confdefs.h <<\EOF @@ -13965,14 +14513,14 @@ fi -echo "$as_me:13968: checking if libc defines sys_errlist" >&5 +echo "$as_me:14516: checking if libc defines sys_errlist" >&5 echo $ECHO_N "checking if libc defines sys_errlist... $ECHO_C" >&6 if test "${ac_cv_libc_defines_sys_errlist+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 13975 "configure" +#line 14523 "configure" #include "confdefs.h" int @@ -13984,16 +14532,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:13987: \"$ac_link\"") >&5 +if { (eval echo "$as_me:14535: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:13990: \$? = $ac_status" >&5 + echo "$as_me:14538: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:13993: \"$ac_try\"") >&5 + { (eval echo "$as_me:14541: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:13996: \$? = $ac_status" >&5 + echo "$as_me:14544: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_libc_defines_sys_errlist="yes" else @@ -14005,7 +14553,7 @@ rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:14008: result: $ac_cv_libc_defines_sys_errlist" >&5 +echo "$as_me:14556: result: $ac_cv_libc_defines_sys_errlist" >&5 echo "${ECHO_T}$ac_cv_libc_defines_sys_errlist" >&6 if test "x$ac_cv_libc_defines_sys_errlist" = "xyes" ; then cat >>confdefs.h <<\EOF @@ -14014,14 +14562,14 @@ fi -echo "$as_me:14017: checking if libc defines sys_nerr" >&5 +echo "$as_me:14565: checking if libc defines sys_nerr" >&5 echo $ECHO_N "checking if libc defines sys_nerr... $ECHO_C" >&6 if test "${ac_cv_libc_defines_sys_nerr+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 14024 "configure" +#line 14572 "configure" #include "confdefs.h" int @@ -14033,16 +14581,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:14036: \"$ac_link\"") >&5 +if { (eval echo "$as_me:14584: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:14039: \$? = $ac_status" >&5 + echo "$as_me:14587: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:14042: \"$ac_try\"") >&5 + { (eval echo "$as_me:14590: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:14045: \$? = $ac_status" >&5 + echo "$as_me:14593: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_libc_defines_sys_nerr="yes" else @@ -14054,7 +14602,7 @@ rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:14057: result: $ac_cv_libc_defines_sys_nerr" >&5 +echo "$as_me:14605: result: $ac_cv_libc_defines_sys_nerr" >&5 echo "${ECHO_T}$ac_cv_libc_defines_sys_nerr" >&6 if test "x$ac_cv_libc_defines_sys_nerr" = "xyes" ; then cat >>confdefs.h <<\EOF @@ -14085,23 +14633,23 @@ for ac_header in sectok.h do as_ac_Header=`echo "ac_cv_header_$ac_header" | $as_tr_sh` -echo "$as_me:14088: checking for $ac_header" >&5 +echo "$as_me:14636: checking for $ac_header" >&5 echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6 if eval "test \"\${$as_ac_Header+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 14094 "configure" +#line 14642 "configure" #include "confdefs.h" #include <$ac_header> _ACEOF -if { (eval echo "$as_me:14098: \"$ac_cpp conftest.$ac_ext\"") >&5 +if { (eval echo "$as_me:14646: \"$ac_cpp conftest.$ac_ext\"") >&5 (eval $ac_cpp conftest.$ac_ext) 2>conftest.er1 ac_status=$? egrep -v '^ *\+' conftest.er1 >conftest.err rm -f conftest.er1 cat conftest.err >&5 - echo "$as_me:14104: \$? = $ac_status" >&5 + echo "$as_me:14652: \$? = $ac_status" >&5 (exit $ac_status); } >/dev/null; then if test -s conftest.err; then ac_cpp_err=$ac_c_preproc_warn_flag @@ -14120,7 +14668,7 @@ fi rm -f conftest.err conftest.$ac_ext fi -echo "$as_me:14123: result: `eval echo '${'$as_ac_Header'}'`" >&5 +echo "$as_me:14671: result: `eval echo '${'$as_ac_Header'}'`" >&5 echo "${ECHO_T}`eval echo '${'$as_ac_Header'}'`" >&6 if test `eval echo '${'$as_ac_Header'}'` = yes; then cat >>confdefs.h <&5 + { { echo "$as_me:14682: error: Can't find sectok.h" >&5 echo "$as_me: error: Can't find sectok.h" >&2;} { (exit 1); exit 1; }; } fi -echo "$as_me:14139: checking for sectok_open in -lsectok" >&5 +echo "$as_me:14687: checking for sectok_open in -lsectok" >&5 echo $ECHO_N "checking for sectok_open in -lsectok... $ECHO_C" >&6 if test "${ac_cv_lib_sectok_sectok_open+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -14144,7 +14692,7 @@ ac_check_lib_save_LIBS=$LIBS LIBS="-lsectok $LIBS" cat >conftest.$ac_ext <<_ACEOF -#line 14147 "configure" +#line 14695 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -14163,16 +14711,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:14166: \"$ac_link\"") >&5 +if { (eval echo "$as_me:14714: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:14169: \$? = $ac_status" >&5 + echo "$as_me:14717: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:14172: \"$ac_try\"") >&5 + { (eval echo "$as_me:14720: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:14175: \$? = $ac_status" >&5 + echo "$as_me:14723: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_lib_sectok_sectok_open=yes else @@ -14183,7 +14731,7 @@ rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi -echo "$as_me:14186: result: $ac_cv_lib_sectok_sectok_open" >&5 +echo "$as_me:14734: result: $ac_cv_lib_sectok_sectok_open" >&5 echo "${ECHO_T}$ac_cv_lib_sectok_sectok_open" >&6 if test $ac_cv_lib_sectok_sectok_open = yes; then cat >>confdefs.h <&5 + { { echo "$as_me:14746: error: Can't find libsectok" >&5 echo "$as_me: error: Can't find libsectok" >&2;} { (exit 1); exit 1; }; } fi @@ -14225,7 +14773,7 @@ OPENSC_CONFIG=$opensc_config_prefix/bin/opensc-config # Extract the first word of "opensc-config", so it can be a program name with args. set dummy opensc-config; ac_word=$2 -echo "$as_me:14228: checking for $ac_word" >&5 +echo "$as_me:14776: checking for $ac_word" >&5 echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 if test "${ac_cv_path_OPENSC_CONFIG+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -14242,7 +14790,7 @@ test -z "$ac_dir" && ac_dir=. if $as_executable_p "$ac_dir/$ac_word"; then ac_cv_path_OPENSC_CONFIG="$ac_dir/$ac_word" - echo "$as_me:14245: found $ac_dir/$ac_word" >&5 + echo "$as_me:14793: found $ac_dir/$ac_word" >&5 break fi done @@ -14254,10 +14802,10 @@ OPENSC_CONFIG=$ac_cv_path_OPENSC_CONFIG if test -n "$OPENSC_CONFIG"; then - echo "$as_me:14257: result: $OPENSC_CONFIG" >&5 + echo "$as_me:14805: result: $OPENSC_CONFIG" >&5 echo "${ECHO_T}$OPENSC_CONFIG" >&6 else - echo "$as_me:14260: result: no" >&5 + echo "$as_me:14808: result: no" >&5 echo "${ECHO_T}no" >&6 fi @@ -14278,20 +14826,8 @@ fi fi -# Check whether user wants DNS support -DNS_MSG="no" - -# Check whether --with-dns or --without-dns was given. -if test "${with_dns+set}" = set; then - withval="$with_dns" - - if test "x$withval" != "xno" ; then - DNS_MSG="yes" - cat >>confdefs.h <<\EOF -#define DNS 1 -EOF - - echo "$as_me:14294: checking for library containing getrrsetbyname" >&5 +# Check libraries needed by DNS fingerprint support +echo "$as_me:14830: checking for library containing getrrsetbyname" >&5 echo $ECHO_N "checking for library containing getrrsetbyname... $ECHO_C" >&6 if test "${ac_cv_search_getrrsetbyname+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -14299,7 +14835,7 @@ ac_func_search_save_LIBS=$LIBS ac_cv_search_getrrsetbyname=no cat >conftest.$ac_ext <<_ACEOF -#line 14302 "configure" +#line 14838 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -14318,16 +14854,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:14321: \"$ac_link\"") >&5 +if { (eval echo "$as_me:14857: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:14324: \$? = $ac_status" >&5 + echo "$as_me:14860: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:14327: \"$ac_try\"") >&5 + { (eval echo "$as_me:14863: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:14330: \$? = $ac_status" >&5 + echo "$as_me:14866: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_search_getrrsetbyname="none required" else @@ -14339,7 +14875,7 @@ for ac_lib in resolv; do LIBS="-l$ac_lib $ac_func_search_save_LIBS" cat >conftest.$ac_ext <<_ACEOF -#line 14342 "configure" +#line 14878 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -14358,16 +14894,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:14361: \"$ac_link\"") >&5 +if { (eval echo "$as_me:14897: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:14364: \$? = $ac_status" >&5 + echo "$as_me:14900: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:14367: \"$ac_try\"") >&5 + { (eval echo "$as_me:14903: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:14370: \$? = $ac_status" >&5 + echo "$as_me:14906: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_search_getrrsetbyname="-l$ac_lib" break @@ -14380,7 +14916,7 @@ fi LIBS=$ac_func_search_save_LIBS fi -echo "$as_me:14383: result: $ac_cv_search_getrrsetbyname" >&5 +echo "$as_me:14919: result: $ac_cv_search_getrrsetbyname" >&5 echo "${ECHO_T}$ac_cv_search_getrrsetbyname" >&6 if test "$ac_cv_search_getrrsetbyname" != no; then test "$ac_cv_search_getrrsetbyname" = "none required" || LIBS="$ac_cv_search_getrrsetbyname $LIBS" @@ -14390,8 +14926,8 @@ else - # Needed by our getrrsetbyname() - echo "$as_me:14394: checking for library containing res_query" >&5 + # Needed by our getrrsetbyname() + echo "$as_me:14930: checking for library containing res_query" >&5 echo $ECHO_N "checking for library containing res_query... $ECHO_C" >&6 if test "${ac_cv_search_res_query+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -14399,7 +14935,7 @@ ac_func_search_save_LIBS=$LIBS ac_cv_search_res_query=no cat >conftest.$ac_ext <<_ACEOF -#line 14402 "configure" +#line 14938 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -14418,16 +14954,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:14421: \"$ac_link\"") >&5 +if { (eval echo "$as_me:14957: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:14424: \$? = $ac_status" >&5 + echo "$as_me:14960: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:14427: \"$ac_try\"") >&5 + { (eval echo "$as_me:14963: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:14430: \$? = $ac_status" >&5 + echo "$as_me:14966: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_search_res_query="none required" else @@ -14439,7 +14975,7 @@ for ac_lib in resolv; do LIBS="-l$ac_lib $ac_func_search_save_LIBS" cat >conftest.$ac_ext <<_ACEOF -#line 14442 "configure" +#line 14978 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -14458,16 +14994,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:14461: \"$ac_link\"") >&5 +if { (eval echo "$as_me:14997: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:14464: \$? = $ac_status" >&5 + echo "$as_me:15000: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:14467: \"$ac_try\"") >&5 + { (eval echo "$as_me:15003: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:14470: \$? = $ac_status" >&5 + echo "$as_me:15006: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_search_res_query="-l$ac_lib" break @@ -14480,14 +15016,14 @@ fi LIBS=$ac_func_search_save_LIBS fi -echo "$as_me:14483: result: $ac_cv_search_res_query" >&5 +echo "$as_me:15019: result: $ac_cv_search_res_query" >&5 echo "${ECHO_T}$ac_cv_search_res_query" >&6 if test "$ac_cv_search_res_query" != no; then test "$ac_cv_search_res_query" = "none required" || LIBS="$ac_cv_search_res_query $LIBS" fi - echo "$as_me:14490: checking for library containing dn_expand" >&5 + echo "$as_me:15026: checking for library containing dn_expand" >&5 echo $ECHO_N "checking for library containing dn_expand... $ECHO_C" >&6 if test "${ac_cv_search_dn_expand+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -14495,7 +15031,7 @@ ac_func_search_save_LIBS=$LIBS ac_cv_search_dn_expand=no cat >conftest.$ac_ext <<_ACEOF -#line 14498 "configure" +#line 15034 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -14514,16 +15050,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:14517: \"$ac_link\"") >&5 +if { (eval echo "$as_me:15053: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:14520: \$? = $ac_status" >&5 + echo "$as_me:15056: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:14523: \"$ac_try\"") >&5 + { (eval echo "$as_me:15059: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:14526: \$? = $ac_status" >&5 + echo "$as_me:15062: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_search_dn_expand="none required" else @@ -14535,7 +15071,7 @@ for ac_lib in resolv; do LIBS="-l$ac_lib $ac_func_search_save_LIBS" cat >conftest.$ac_ext <<_ACEOF -#line 14538 "configure" +#line 15074 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -14554,16 +15090,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:14557: \"$ac_link\"") >&5 +if { (eval echo "$as_me:15093: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:14560: \$? = $ac_status" >&5 + echo "$as_me:15096: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:14563: \"$ac_try\"") >&5 + { (eval echo "$as_me:15099: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:14566: \$? = $ac_status" >&5 + echo "$as_me:15102: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_search_dn_expand="-l$ac_lib" break @@ -14576,7 +15112,7 @@ fi LIBS=$ac_func_search_save_LIBS fi -echo "$as_me:14579: result: $ac_cv_search_dn_expand" >&5 +echo "$as_me:15115: result: $ac_cv_search_dn_expand" >&5 echo "${ECHO_T}$ac_cv_search_dn_expand" >&6 if test "$ac_cv_search_dn_expand" != no; then test "$ac_cv_search_dn_expand" = "none required" || LIBS="$ac_cv_search_dn_expand $LIBS" @@ -14586,13 +15122,13 @@ for ac_func in _getshort _getlong do as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh` -echo "$as_me:14589: checking for $ac_func" >&5 +echo "$as_me:15125: checking for $ac_func" >&5 echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6 if eval "test \"\${$as_ac_var+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 14595 "configure" +#line 15131 "configure" #include "confdefs.h" /* System header to define __stub macros and hopefully few prototypes, which can conflict with char $ac_func (); below. */ @@ -14623,16 +15159,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:14626: \"$ac_link\"") >&5 +if { (eval echo "$as_me:15162: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:14629: \$? = $ac_status" >&5 + echo "$as_me:15165: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:14632: \"$ac_try\"") >&5 + { (eval echo "$as_me:15168: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:14635: \$? = $ac_status" >&5 + echo "$as_me:15171: \$? = $ac_status" >&5 (exit $ac_status); }; }; then eval "$as_ac_var=yes" else @@ -14642,7 +15178,7 @@ fi rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext fi -echo "$as_me:14645: result: `eval echo '${'$as_ac_var'}'`" >&5 +echo "$as_me:15181: result: `eval echo '${'$as_ac_var'}'`" >&5 echo "${ECHO_T}`eval echo '${'$as_ac_var'}'`" >&6 if test `eval echo '${'$as_ac_var'}'` = yes; then cat >>confdefs.h <&5 + echo "$as_me:15191: checking for HEADER.ad" >&5 echo $ECHO_N "checking for HEADER.ad... $ECHO_C" >&6 if test "${ac_cv_member_HEADER_ad+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 14661 "configure" +#line 15197 "configure" #include "confdefs.h" #include @@ -14673,16 +15209,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:14676: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:15212: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:14679: \$? = $ac_status" >&5 + echo "$as_me:15215: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:14682: \"$ac_try\"") >&5 + { (eval echo "$as_me:15218: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:14685: \$? = $ac_status" >&5 + echo "$as_me:15221: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_member_HEADER_ad=yes else @@ -14692,7 +15228,7 @@ fi rm -f conftest.$ac_objext conftest.$ac_ext fi -echo "$as_me:14695: result: $ac_cv_member_HEADER_ad" >&5 +echo "$as_me:15231: result: $ac_cv_member_HEADER_ad" >&5 echo "${ECHO_T}$ac_cv_member_HEADER_ad" >&6 if test $ac_cv_member_HEADER_ad = yes; then cat >>confdefs.h <<\EOF @@ -14703,34 +15239,54 @@ fi - fi - -fi; - # Check whether user wants Kerberos 5 support KRB5_MSG="no" # Check whether --with-kerberos5 or --without-kerberos5 was given. if test "${with_kerberos5+set}" = set; then withval="$with_kerberos5" + if test "x$withval" != "xno" ; then + if test "x$withval" = "xyes" ; then + KRB5ROOT="/usr/local" + else + KRB5ROOT=${withval} + fi - if test "x$withval" != "xno" ; then - if test "x$withval" = "xyes" ; then - KRB5ROOT="/usr/local" - else - KRB5ROOT=${withval} - fi - CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include" - LDFLAGS="$LDFLAGS -L${KRB5ROOT}/lib" - cat >>confdefs.h <<\EOF + cat >>confdefs.h <<\EOF #define KRB5 1 EOF - KRB5_MSG="yes" - echo "$as_me:14730: checking whether we are using Heimdal" >&5 + KRB5_MSG="yes" + + echo "$as_me:15261: checking for krb5-config" >&5 +echo $ECHO_N "checking for krb5-config... $ECHO_C" >&6 + if test -x $KRB5ROOT/bin/krb5-config ; then + KRB5CONF=$KRB5ROOT/bin/krb5-config + echo "$as_me:15265: result: $KRB5CONF" >&5 +echo "${ECHO_T}$KRB5CONF" >&6 + + echo "$as_me:15268: checking for gssapi support" >&5 +echo $ECHO_N "checking for gssapi support... $ECHO_C" >&6 + if $KRB5CONF | grep gssapi >/dev/null ; then + echo "$as_me:15271: result: yes" >&5 +echo "${ECHO_T}yes" >&6 + cat >>confdefs.h <<\EOF +#define GSSAPI 1 +EOF + + k5confopts=gssapi + else + echo "$as_me:15279: result: no" >&5 +echo "${ECHO_T}no" >&6 + k5confopts="" + fi + K5CFLAGS="`$KRB5CONF --cflags $k5confopts`" + K5LIBS="`$KRB5CONF --libs $k5confopts`" + CPPFLAGS="$CPPFLAGS $K5CFLAGS" + echo "$as_me:15286: checking whether we are using Heimdal" >&5 echo $ECHO_N "checking whether we are using Heimdal... $ECHO_C" >&6 - cat >conftest.$ac_ext <<_ACEOF -#line 14733 "configure" + cat >conftest.$ac_ext <<_ACEOF +#line 15289 "configure" #include "confdefs.h" #include int @@ -14742,41 +15298,80 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:14745: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:15301: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:14748: \$? = $ac_status" >&5 + echo "$as_me:15304: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:14751: \"$ac_try\"") >&5 + { (eval echo "$as_me:15307: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:14754: \$? = $ac_status" >&5 + echo "$as_me:15310: \$? = $ac_status" >&5 (exit $ac_status); }; }; then - echo "$as_me:14756: result: yes" >&5 + echo "$as_me:15312: result: yes" >&5 echo "${ECHO_T}yes" >&6 - cat >>confdefs.h <<\EOF + cat >>confdefs.h <<\EOF #define HEIMDAL 1 EOF - K5LIBS="-lkrb5 -ldes -lcom_err -lasn1 -lroken" +else + echo "$as_me: failed program was:" >&5 +cat conftest.$ac_ext >&5 +echo "$as_me:15321: result: no" >&5 +echo "${ECHO_T}no" >&6 + +fi +rm -f conftest.$ac_objext conftest.$ac_ext + else + echo "$as_me:15327: result: no" >&5 +echo "${ECHO_T}no" >&6 + CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include" + LDFLAGS="$LDFLAGS -L${KRB5ROOT}/lib" + echo "$as_me:15331: checking whether we are using Heimdal" >&5 +echo $ECHO_N "checking whether we are using Heimdal... $ECHO_C" >&6 + cat >conftest.$ac_ext <<_ACEOF +#line 15334 "configure" +#include "confdefs.h" + #include +int +main () +{ + char *tmp = heimdal_version; + ; + return 0; +} +_ACEOF +rm -f conftest.$ac_objext +if { (eval echo "$as_me:15346: \"$ac_compile\"") >&5 + (eval $ac_compile) 2>&5 + ac_status=$? + echo "$as_me:15349: \$? = $ac_status" >&5 + (exit $ac_status); } && + { ac_try='test -s conftest.$ac_objext' + { (eval echo "$as_me:15352: \"$ac_try\"") >&5 + (eval $ac_try) 2>&5 + ac_status=$? + echo "$as_me:15355: \$? = $ac_status" >&5 + (exit $ac_status); }; }; then + echo "$as_me:15357: result: yes" >&5 +echo "${ECHO_T}yes" >&6 + cat >>confdefs.h <<\EOF +#define HEIMDAL 1 +EOF + + K5LIBS="-lkrb5 -ldes -lcom_err -lasn1 -lroken" else echo "$as_me: failed program was:" >&5 cat conftest.$ac_ext >&5 - echo "$as_me:14767: result: no" >&5 + echo "$as_me:15368: result: no" >&5 echo "${ECHO_T}no" >&6 - K5LIBS="-lkrb5 -lk5crypto -lcom_err" + K5LIBS="-lkrb5 -lk5crypto -lcom_err" fi rm -f conftest.$ac_objext conftest.$ac_ext - if test ! -z "$need_dash_r" ; then - LDFLAGS="$LDFLAGS -R${KRB5ROOT}/lib" - fi - if test ! -z "$blibpath" ; then - blibpath="$blibpath:${KRB5ROOT}/lib" - fi - echo "$as_me:14779: checking for library containing dn_expand" >&5 + echo "$as_me:15374: checking for library containing dn_expand" >&5 echo $ECHO_N "checking for library containing dn_expand... $ECHO_C" >&6 if test "${ac_cv_search_dn_expand+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -14784,7 +15379,7 @@ ac_func_search_save_LIBS=$LIBS ac_cv_search_dn_expand=no cat >conftest.$ac_ext <<_ACEOF -#line 14787 "configure" +#line 15382 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -14803,16 +15398,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:14806: \"$ac_link\"") >&5 +if { (eval echo "$as_me:15401: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:14809: \$? = $ac_status" >&5 + echo "$as_me:15404: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:14812: \"$ac_try\"") >&5 + { (eval echo "$as_me:15407: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:14815: \$? = $ac_status" >&5 + echo "$as_me:15410: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_search_dn_expand="none required" else @@ -14824,7 +15419,7 @@ for ac_lib in resolv; do LIBS="-l$ac_lib $ac_func_search_save_LIBS" cat >conftest.$ac_ext <<_ACEOF -#line 14827 "configure" +#line 15422 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -14843,16 +15438,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:14846: \"$ac_link\"") >&5 +if { (eval echo "$as_me:15441: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:14849: \$? = $ac_status" >&5 + echo "$as_me:15444: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:14852: \"$ac_try\"") >&5 + { (eval echo "$as_me:15447: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:14855: \$? = $ac_status" >&5 + echo "$as_me:15450: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_search_dn_expand="-l$ac_lib" break @@ -14865,14 +15460,14 @@ fi LIBS=$ac_func_search_save_LIBS fi -echo "$as_me:14868: result: $ac_cv_search_dn_expand" >&5 +echo "$as_me:15463: result: $ac_cv_search_dn_expand" >&5 echo "${ECHO_T}$ac_cv_search_dn_expand" >&6 if test "$ac_cv_search_dn_expand" != no; then test "$ac_cv_search_dn_expand" = "none required" || LIBS="$ac_cv_search_dn_expand $LIBS" fi - echo "$as_me:14875: checking for gss_init_sec_context in -lgssapi" >&5 + echo "$as_me:15470: checking for gss_init_sec_context in -lgssapi" >&5 echo $ECHO_N "checking for gss_init_sec_context in -lgssapi... $ECHO_C" >&6 if test "${ac_cv_lib_gssapi_gss_init_sec_context+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -14880,7 +15475,7 @@ ac_check_lib_save_LIBS=$LIBS LIBS="-lgssapi $K5LIBS $LIBS" cat >conftest.$ac_ext <<_ACEOF -#line 14883 "configure" +#line 15478 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -14899,16 +15494,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:14902: \"$ac_link\"") >&5 +if { (eval echo "$as_me:15497: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:14905: \$? = $ac_status" >&5 + echo "$as_me:15500: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:14908: \"$ac_try\"") >&5 + { (eval echo "$as_me:15503: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:14911: \$? = $ac_status" >&5 + echo "$as_me:15506: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_lib_gssapi_gss_init_sec_context=yes else @@ -14919,7 +15514,7 @@ rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi -echo "$as_me:14922: result: $ac_cv_lib_gssapi_gss_init_sec_context" >&5 +echo "$as_me:15517: result: $ac_cv_lib_gssapi_gss_init_sec_context" >&5 echo "${ECHO_T}$ac_cv_lib_gssapi_gss_init_sec_context" >&6 if test $ac_cv_lib_gssapi_gss_init_sec_context = yes; then cat >>confdefs.h <<\EOF @@ -14928,7 +15523,7 @@ K5LIBS="-lgssapi $K5LIBS" else - echo "$as_me:14931: checking for gss_init_sec_context in -lgssapi_krb5" >&5 + echo "$as_me:15526: checking for gss_init_sec_context in -lgssapi_krb5" >&5 echo $ECHO_N "checking for gss_init_sec_context in -lgssapi_krb5... $ECHO_C" >&6 if test "${ac_cv_lib_gssapi_krb5_gss_init_sec_context+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -14936,7 +15531,7 @@ ac_check_lib_save_LIBS=$LIBS LIBS="-lgssapi_krb5 $K5LIBS $LIBS" cat >conftest.$ac_ext <<_ACEOF -#line 14939 "configure" +#line 15534 "configure" #include "confdefs.h" /* Override any gcc2 internal prototype to avoid an error. */ @@ -14955,16 +15550,16 @@ } _ACEOF rm -f conftest.$ac_objext conftest$ac_exeext -if { (eval echo "$as_me:14958: \"$ac_link\"") >&5 +if { (eval echo "$as_me:15553: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:14961: \$? = $ac_status" >&5 + echo "$as_me:15556: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest$ac_exeext' - { (eval echo "$as_me:14964: \"$ac_try\"") >&5 + { (eval echo "$as_me:15559: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:14967: \$? = $ac_status" >&5 + echo "$as_me:15562: \$? = $ac_status" >&5 (exit $ac_status); }; }; then ac_cv_lib_gssapi_krb5_gss_init_sec_context=yes else @@ -14975,38 +15570,38 @@ rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi -echo "$as_me:14978: result: $ac_cv_lib_gssapi_krb5_gss_init_sec_context" >&5 +echo "$as_me:15573: result: $ac_cv_lib_gssapi_krb5_gss_init_sec_context" >&5 echo "${ECHO_T}$ac_cv_lib_gssapi_krb5_gss_init_sec_context" >&6 if test $ac_cv_lib_gssapi_krb5_gss_init_sec_context = yes; then cat >>confdefs.h <<\EOF #define GSSAPI 1 EOF - K5LIBS="-lgssapi_krb5 $K5LIBS" + K5LIBS="-lgssapi_krb5 $K5LIBS" else - { echo "$as_me:14987: WARNING: Cannot find any suitable gss-api library - build may fail" >&5 + { echo "$as_me:15582: WARNING: Cannot find any suitable gss-api library - build may fail" >&5 echo "$as_me: WARNING: Cannot find any suitable gss-api library - build may fail" >&2;} fi fi - echo "$as_me:14993: checking for gssapi.h" >&5 + echo "$as_me:15588: checking for gssapi.h" >&5 echo $ECHO_N "checking for gssapi.h... $ECHO_C" >&6 if test "${ac_cv_header_gssapi_h+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 14999 "configure" +#line 15594 "configure" #include "confdefs.h" #include _ACEOF -if { (eval echo "$as_me:15003: \"$ac_cpp conftest.$ac_ext\"") >&5 +if { (eval echo "$as_me:15598: \"$ac_cpp conftest.$ac_ext\"") >&5 (eval $ac_cpp conftest.$ac_ext) 2>conftest.er1 ac_status=$? egrep -v '^ *\+' conftest.er1 >conftest.err rm -f conftest.er1 cat conftest.err >&5 - echo "$as_me:15009: \$? = $ac_status" >&5 + echo "$as_me:15604: \$? = $ac_status" >&5 (exit $ac_status); } >/dev/null; then if test -s conftest.err; then ac_cpp_err=$ac_c_preproc_warn_flag @@ -15025,7 +15620,7 @@ fi rm -f conftest.err conftest.$ac_ext fi -echo "$as_me:15028: result: $ac_cv_header_gssapi_h" >&5 +echo "$as_me:15623: result: $ac_cv_header_gssapi_h" >&5 echo "${ECHO_T}$ac_cv_header_gssapi_h" >&6 if test $ac_cv_header_gssapi_h = yes; then : @@ -15036,23 +15631,23 @@ for ac_header in gssapi.h do as_ac_Header=`echo "ac_cv_header_$ac_header" | $as_tr_sh` -echo "$as_me:15039: checking for $ac_header" >&5 +echo "$as_me:15634: checking for $ac_header" >&5 echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6 if eval "test \"\${$as_ac_Header+set}\" = set"; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 15045 "configure" +#line 15640 "configure" #include "confdefs.h" #include <$ac_header> _ACEOF -if { (eval echo "$as_me:15049: \"$ac_cpp conftest.$ac_ext\"") >&5 +if { (eval echo "$as_me:15644: \"$ac_cpp conftest.$ac_ext\"") >&5 (eval $ac_cpp conftest.$ac_ext) 2>conftest.er1 ac_status=$? egrep -v '^ *\+' conftest.er1 >conftest.err rm -f conftest.er1 cat conftest.err >&5 - echo "$as_me:15055: \$? = $ac_status" >&5 + echo "$as_me:15650: \$? = $ac_status" >&5 (exit $ac_status); } >/dev/null; then if test -s conftest.err; then ac_cpp_err=$ac_c_preproc_warn_flag @@ -15071,7 +15666,7 @@ fi rm -f conftest.err conftest.$ac_ext fi -echo "$as_me:15074: result: `eval echo '${'$as_ac_Header'}'`" >&5 +echo "$as_me:15669: result: `eval echo '${'$as_ac_Header'}'`" >&5 echo "${ECHO_T}`eval echo '${'$as_ac_Header'}'`" >&6 if test `eval echo '${'$as_ac_Header'}'` = yes; then cat >>confdefs.h <&5 + { echo "$as_me:15677: WARNING: Cannot find any suitable gss-api header - build may fail" >&5 echo "$as_me: WARNING: Cannot find any suitable gss-api header - build may fail" >&2;} fi @@ -15089,23 +15684,23 @@ oldCPP="$CPPFLAGS" CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi" - echo "$as_me:15092: checking for gssapi_krb5.h" >&5 + echo "$as_me:15687: checking for gssapi_krb5.h" >&5 echo $ECHO_N "checking for gssapi_krb5.h... $ECHO_C" >&6 if test "${ac_cv_header_gssapi_krb5_h+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else cat >conftest.$ac_ext <<_ACEOF -#line 15098 "configure" +#line 15693 "configure" #include "confdefs.h" #include _ACEOF -if { (eval echo "$as_me:15102: \"$ac_cpp conftest.$ac_ext\"") >&5 +if { (eval echo "$as_me:15697: \"$ac_cpp conftest.$ac_ext\"") >&5 (eval $ac_cpp conftest.$ac_ext) 2>conftest.er1 ac_status=$? egrep -v '^ *\+' conftest.er1 >conftest.err rm -f conftest.er1 cat conftest.err >&5 - echo "$as_me:15108: \$? = $ac_status" >&5 + echo "$as_me:15703: \$? = $ac_status" >&5 (exit $ac_status); } >/dev/null; then if test -s conftest.err; then ac_cpp_err=$ac_c_preproc_warn_flag @@ -15124,7 +15719,7 @@ fi rm -f conftest.err conftest.$ac_ext fi -echo "$as_me:15127: result: $ac_cv_header_gssapi_krb5_h" >&5 +echo "$as_me:15722: result: $ac_cv_header_gssapi_krb5_h" >&5 echo "${ECHO_T}$ac_cv_header_gssapi_krb5_h" >&6 if test $ac_cv_header_gssapi_krb5_h = yes; then : @@ -15132,11 +15727,260 @@ CPPFLAGS="$oldCPP" fi - KRB5=yes - fi + fi + if test ! -z "$need_dash_r" ; then + LDFLAGS="$LDFLAGS -R${KRB5ROOT}/lib" + fi + if test ! -z "$blibpath" ; then + blibpath="$blibpath:${KRB5ROOT}/lib" + fi + fi + +for ac_header in gssapi.h gssapi/gssapi.h +do +as_ac_Header=`echo "ac_cv_header_$ac_header" | $as_tr_sh` +echo "$as_me:15742: checking for $ac_header" >&5 +echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6 +if eval "test \"\${$as_ac_Header+set}\" = set"; then + echo $ECHO_N "(cached) $ECHO_C" >&6 +else + cat >conftest.$ac_ext <<_ACEOF +#line 15748 "configure" +#include "confdefs.h" +#include <$ac_header> +_ACEOF +if { (eval echo "$as_me:15752: \"$ac_cpp conftest.$ac_ext\"") >&5 + (eval $ac_cpp conftest.$ac_ext) 2>conftest.er1 + ac_status=$? + egrep -v '^ *\+' conftest.er1 >conftest.err + rm -f conftest.er1 + cat conftest.err >&5 + echo "$as_me:15758: \$? = $ac_status" >&5 + (exit $ac_status); } >/dev/null; then + if test -s conftest.err; then + ac_cpp_err=$ac_c_preproc_warn_flag + else + ac_cpp_err= + fi +else + ac_cpp_err=yes +fi +if test -z "$ac_cpp_err"; then + eval "$as_ac_Header=yes" +else + echo "$as_me: failed program was:" >&5 + cat conftest.$ac_ext >&5 + eval "$as_ac_Header=no" +fi +rm -f conftest.err conftest.$ac_ext +fi +echo "$as_me:15777: result: `eval echo '${'$as_ac_Header'}'`" >&5 +echo "${ECHO_T}`eval echo '${'$as_ac_Header'}'`" >&6 +if test `eval echo '${'$as_ac_Header'}'` = yes; then + cat >>confdefs.h <&5 +echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6 +if eval "test \"\${$as_ac_Header+set}\" = set"; then + echo $ECHO_N "(cached) $ECHO_C" >&6 +else + cat >conftest.$ac_ext <<_ACEOF +#line 15796 "configure" +#include "confdefs.h" +#include <$ac_header> +_ACEOF +if { (eval echo "$as_me:15800: \"$ac_cpp conftest.$ac_ext\"") >&5 + (eval $ac_cpp conftest.$ac_ext) 2>conftest.er1 + ac_status=$? + egrep -v '^ *\+' conftest.er1 >conftest.err + rm -f conftest.er1 + cat conftest.err >&5 + echo "$as_me:15806: \$? = $ac_status" >&5 + (exit $ac_status); } >/dev/null; then + if test -s conftest.err; then + ac_cpp_err=$ac_c_preproc_warn_flag + else + ac_cpp_err= + fi +else + ac_cpp_err=yes +fi +if test -z "$ac_cpp_err"; then + eval "$as_ac_Header=yes" +else + echo "$as_me: failed program was:" >&5 + cat conftest.$ac_ext >&5 + eval "$as_ac_Header=no" +fi +rm -f conftest.err conftest.$ac_ext +fi +echo "$as_me:15825: result: `eval echo '${'$as_ac_Header'}'`" >&5 +echo "${ECHO_T}`eval echo '${'$as_ac_Header'}'`" >&6 +if test `eval echo '${'$as_ac_Header'}'` = yes; then + cat >>confdefs.h <&5 +echo $ECHO_N "checking for $ac_header... $ECHO_C" >&6 +if eval "test \"\${$as_ac_Header+set}\" = set"; then + echo $ECHO_N "(cached) $ECHO_C" >&6 +else + cat >conftest.$ac_ext <<_ACEOF +#line 15844 "configure" +#include "confdefs.h" +#include <$ac_header> +_ACEOF +if { (eval echo "$as_me:15848: \"$ac_cpp conftest.$ac_ext\"") >&5 + (eval $ac_cpp conftest.$ac_ext) 2>conftest.er1 + ac_status=$? + egrep -v '^ *\+' conftest.er1 >conftest.err + rm -f conftest.er1 + cat conftest.err >&5 + echo "$as_me:15854: \$? = $ac_status" >&5 + (exit $ac_status); } >/dev/null; then + if test -s conftest.err; then + ac_cpp_err=$ac_c_preproc_warn_flag + else + ac_cpp_err= + fi +else + ac_cpp_err=yes +fi +if test -z "$ac_cpp_err"; then + eval "$as_ac_Header=yes" +else + echo "$as_me: failed program was:" >&5 + cat conftest.$ac_ext >&5 + eval "$as_ac_Header=no" +fi +rm -f conftest.err conftest.$ac_ext +fi +echo "$as_me:15873: result: `eval echo '${'$as_ac_Header'}'`" >&5 +echo "${ECHO_T}`eval echo '${'$as_ac_Header'}'`" >&6 +if test `eval echo '${'$as_ac_Header'}'` = yes; then + cat >>confdefs.h <&5 +echo $ECHO_N "checking for library containing k_hasafs... $ECHO_C" >&6 +if test "${ac_cv_search_k_hasafs+set}" = set; then + echo $ECHO_N "(cached) $ECHO_C" >&6 +else + ac_func_search_save_LIBS=$LIBS +ac_cv_search_k_hasafs=no +cat >conftest.$ac_ext <<_ACEOF +#line 15892 "configure" +#include "confdefs.h" + +/* Override any gcc2 internal prototype to avoid an error. */ +#ifdef __cplusplus +extern "C" +#endif +/* We use char because int might match the return type of a gcc2 + builtin and then its argument prototype would still apply. */ +char k_hasafs (); +int +main () +{ +k_hasafs (); + ; + return 0; +} +_ACEOF +rm -f conftest.$ac_objext conftest$ac_exeext +if { (eval echo "$as_me:15911: \"$ac_link\"") >&5 + (eval $ac_link) 2>&5 + ac_status=$? + echo "$as_me:15914: \$? = $ac_status" >&5 + (exit $ac_status); } && + { ac_try='test -s conftest$ac_exeext' + { (eval echo "$as_me:15917: \"$ac_try\"") >&5 + (eval $ac_try) 2>&5 + ac_status=$? + echo "$as_me:15920: \$? = $ac_status" >&5 + (exit $ac_status); }; }; then + ac_cv_search_k_hasafs="none required" +else + echo "$as_me: failed program was:" >&5 +cat conftest.$ac_ext >&5 +fi +rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext +if test "$ac_cv_search_k_hasafs" = no; then + for ac_lib in kafs; do + LIBS="-l$ac_lib $ac_func_search_save_LIBS" + cat >conftest.$ac_ext <<_ACEOF +#line 15932 "configure" +#include "confdefs.h" + +/* Override any gcc2 internal prototype to avoid an error. */ +#ifdef __cplusplus +extern "C" +#endif +/* We use char because int might match the return type of a gcc2 + builtin and then its argument prototype would still apply. */ +char k_hasafs (); +int +main () +{ +k_hasafs (); + ; + return 0; +} +_ACEOF +rm -f conftest.$ac_objext conftest$ac_exeext +if { (eval echo "$as_me:15951: \"$ac_link\"") >&5 + (eval $ac_link) 2>&5 + ac_status=$? + echo "$as_me:15954: \$? = $ac_status" >&5 + (exit $ac_status); } && + { ac_try='test -s conftest$ac_exeext' + { (eval echo "$as_me:15957: \"$ac_try\"") >&5 + (eval $ac_try) 2>&5 + ac_status=$? + echo "$as_me:15960: \$? = $ac_status" >&5 + (exit $ac_status); }; }; then + ac_cv_search_k_hasafs="-l$ac_lib" +break +else + echo "$as_me: failed program was:" >&5 +cat conftest.$ac_ext >&5 +fi +rm -f conftest.$ac_objext conftest$ac_exeext conftest.$ac_ext + done +fi +LIBS=$ac_func_search_save_LIBS +fi +echo "$as_me:15973: result: $ac_cv_search_k_hasafs" >&5 +echo "${ECHO_T}$ac_cv_search_k_hasafs" >&6 +if test "$ac_cv_search_k_hasafs" != no; then + test "$ac_cv_search_k_hasafs" = "none required" || LIBS="$ac_cv_search_k_hasafs $LIBS" + cat >>confdefs.h <<\EOF +#define USE_AFS 1 +EOF + +fi fi; -LIBS="$LIBS $K5LIBS" # Looking for programs, paths and files @@ -15169,7 +16013,7 @@ TestPath="${TestPath}${PATH_SEPARATOR}/usr/openwin/bin" # Extract the first word of "xauth", so it can be a program name with args. set dummy xauth; ac_word=$2 -echo "$as_me:15172: checking for $ac_word" >&5 +echo "$as_me:16016: checking for $ac_word" >&5 echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 if test "${ac_cv_path_xauth_path+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -15186,7 +16030,7 @@ test -z "$ac_dir" && ac_dir=. if $as_executable_p "$ac_dir/$ac_word"; then ac_cv_path_xauth_path="$ac_dir/$ac_word" - echo "$as_me:15189: found $ac_dir/$ac_word" >&5 + echo "$as_me:16033: found $ac_dir/$ac_word" >&5 break fi done @@ -15197,10 +16041,10 @@ xauth_path=$ac_cv_path_xauth_path if test -n "$xauth_path"; then - echo "$as_me:15200: result: $xauth_path" >&5 + echo "$as_me:16044: result: $xauth_path" >&5 echo "${ECHO_T}$xauth_path" >&6 else - echo "$as_me:15203: result: no" >&5 + echo "$as_me:16047: result: no" >&5 echo "${ECHO_T}no" >&6 fi @@ -15244,13 +16088,13 @@ if test -z "$no_dev_ptmx" ; then if test "x$disable_ptmx_check" != "xyes" ; then - echo "$as_me:15247: checking for \"/dev/ptmx\"" >&5 + echo "$as_me:16091: checking for \"/dev/ptmx\"" >&5 echo $ECHO_N "checking for \"/dev/ptmx\"... $ECHO_C" >&6 if test "${ac_cv_file___dev_ptmx_+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else test "$cross_compiling" = yes && - { { echo "$as_me:15253: error: cannot check for file existence when cross compiling" >&5 + { { echo "$as_me:16097: error: cannot check for file existence when cross compiling" >&5 echo "$as_me: error: cannot check for file existence when cross compiling" >&2;} { (exit 1); exit 1; }; } if test -r ""/dev/ptmx""; then @@ -15259,7 +16103,7 @@ ac_cv_file___dev_ptmx_=no fi fi -echo "$as_me:15262: result: $ac_cv_file___dev_ptmx_" >&5 +echo "$as_me:16106: result: $ac_cv_file___dev_ptmx_" >&5 echo "${ECHO_T}$ac_cv_file___dev_ptmx_" >&6 if test $ac_cv_file___dev_ptmx_ = yes; then @@ -15273,13 +16117,13 @@ fi fi -echo "$as_me:15276: checking for \"/dev/ptc\"" >&5 +echo "$as_me:16120: checking for \"/dev/ptc\"" >&5 echo $ECHO_N "checking for \"/dev/ptc\"... $ECHO_C" >&6 if test "${ac_cv_file___dev_ptc_+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else test "$cross_compiling" = yes && - { { echo "$as_me:15282: error: cannot check for file existence when cross compiling" >&5 + { { echo "$as_me:16126: error: cannot check for file existence when cross compiling" >&5 echo "$as_me: error: cannot check for file existence when cross compiling" >&2;} { (exit 1); exit 1; }; } if test -r ""/dev/ptc""; then @@ -15288,7 +16132,7 @@ ac_cv_file___dev_ptc_=no fi fi -echo "$as_me:15291: result: $ac_cv_file___dev_ptc_" >&5 +echo "$as_me:16135: result: $ac_cv_file___dev_ptc_" >&5 echo "${ECHO_T}$ac_cv_file___dev_ptc_" >&6 if test $ac_cv_file___dev_ptc_ = yes; then @@ -15311,7 +16155,7 @@ MANTYPE=$withval ;; *) - { { echo "$as_me:15314: error: invalid man type: $withval" >&5 + { { echo "$as_me:16158: error: invalid man type: $withval" >&5 echo "$as_me: error: invalid man type: $withval" >&2;} { (exit 1); exit 1; }; } ;; @@ -15324,7 +16168,7 @@ do # Extract the first word of "$ac_prog", so it can be a program name with args. set dummy $ac_prog; ac_word=$2 -echo "$as_me:15327: checking for $ac_word" >&5 +echo "$as_me:16171: checking for $ac_word" >&5 echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6 if test "${ac_cv_path_NROFF+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 @@ -15341,7 +16185,7 @@ test -z "$ac_dir" && ac_dir=. if $as_executable_p "$ac_dir/$ac_word"; then ac_cv_path_NROFF="$ac_dir/$ac_word" - echo "$as_me:15344: found $ac_dir/$ac_word" >&5 + echo "$as_me:16188: found $ac_dir/$ac_word" >&5 break fi done @@ -15352,10 +16196,10 @@ NROFF=$ac_cv_path_NROFF if test -n "$NROFF"; then - echo "$as_me:15355: result: $NROFF" >&5 + echo "$as_me:16199: result: $NROFF" >&5 echo "${ECHO_T}$NROFF" >&6 else - echo "$as_me:15358: result: no" >&5 + echo "$as_me:16202: result: no" >&5 echo "${ECHO_T}no" >&6 fi @@ -15412,10 +16256,10 @@ fi; if test -z "$disable_shadow" ; then - echo "$as_me:15415: checking if the systems has expire shadow information" >&5 + echo "$as_me:16259: checking if the systems has expire shadow information" >&5 echo $ECHO_N "checking if the systems has expire shadow information... $ECHO_C" >&6 cat >conftest.$ac_ext <<_ACEOF -#line 15418 "configure" +#line 16262 "configure" #include "confdefs.h" #include @@ -15431,16 +16275,16 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:15434: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:16278: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:15437: \$? = $ac_status" >&5 + echo "$as_me:16281: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:15440: \"$ac_try\"") >&5 + { (eval echo "$as_me:16284: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:15443: \$? = $ac_status" >&5 + echo "$as_me:16287: \$? = $ac_status" >&5 (exit $ac_status); }; }; then sp_expire_available=yes else @@ -15451,14 +16295,14 @@ rm -f conftest.$ac_objext conftest.$ac_ext if test "x$sp_expire_available" = "xyes" ; then - echo "$as_me:15454: result: yes" >&5 + echo "$as_me:16298: result: yes" >&5 echo "${ECHO_T}yes" >&6 cat >>confdefs.h <<\EOF #define HAS_SHADOW_EXPIRE 1 EOF else - echo "$as_me:15461: result: no" >&5 + echo "$as_me:16305: result: no" >&5 echo "${ECHO_T}no" >&6 fi fi @@ -15495,13 +16339,13 @@ else -echo "$as_me:15498: checking for \"/etc/default/login\"" >&5 +echo "$as_me:16342: checking for \"/etc/default/login\"" >&5 echo $ECHO_N "checking for \"/etc/default/login\"... $ECHO_C" >&6 if test "${ac_cv_file___etc_default_login_+set}" = set; then echo $ECHO_N "(cached) $ECHO_C" >&6 else test "$cross_compiling" = yes && - { { echo "$as_me:15504: error: cannot check for file existence when cross compiling" >&5 + { { echo "$as_me:16348: error: cannot check for file existence when cross compiling" >&5 echo "$as_me: error: cannot check for file existence when cross compiling" >&2;} { (exit 1); exit 1; }; } if test -r ""/etc/default/login""; then @@ -15510,7 +16354,7 @@ ac_cv_file___etc_default_login_=no fi fi -echo "$as_me:15513: result: $ac_cv_file___etc_default_login_" >&5 +echo "$as_me:16357: result: $ac_cv_file___etc_default_login_" >&5 echo "${ECHO_T}$ac_cv_file___etc_default_login_" >&6 if test $ac_cv_file___etc_default_login_ = yes; then external_path_file=/etc/default/login @@ -15538,7 +16382,7 @@ withval="$with_default_path" if test "x$external_path_file" = "x/etc/login.conf" ; then - { echo "$as_me:15541: WARNING: + { echo "$as_me:16385: WARNING: --with-default-path=PATH has no effect on this system. Edit /etc/login.conf instead." >&5 echo "$as_me: WARNING: @@ -15546,7 +16390,7 @@ Edit /etc/login.conf instead." >&2;} elif test "x$withval" != "xno" ; then if test ! -z "$external_path_file" ; then - { echo "$as_me:15549: WARNING: + { echo "$as_me:16393: WARNING: --with-default-path=PATH will only be used if PATH is not defined in $external_path_file ." >&5 echo "$as_me: WARNING: @@ -15559,11 +16403,11 @@ else if test "x$external_path_file" = "x/etc/login.conf" ; then - { echo "$as_me:15562: WARNING: Make sure the path to scp is in /etc/login.conf" >&5 + { echo "$as_me:16406: WARNING: Make sure the path to scp is in /etc/login.conf" >&5 echo "$as_me: WARNING: Make sure the path to scp is in /etc/login.conf" >&2;} else if test ! -z "$external_path_file" ; then - { echo "$as_me:15566: WARNING: + { echo "$as_me:16410: WARNING: If PATH is defined in $external_path_file, ensure the path to scp is included, otherwise scp will not work." >&5 echo "$as_me: WARNING: @@ -15575,7 +16419,7 @@ else cat >conftest.$ac_ext <<_ACEOF -#line 15578 "configure" +#line 16422 "configure" #include "confdefs.h" /* find out what STDPATH is */ @@ -15612,15 +16456,15 @@ _ACEOF rm -f conftest$ac_exeext -if { (eval echo "$as_me:15615: \"$ac_link\"") >&5 +if { (eval echo "$as_me:16459: \"$ac_link\"") >&5 (eval $ac_link) 2>&5 ac_status=$? - echo "$as_me:15618: \$? = $ac_status" >&5 + echo "$as_me:16462: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='./conftest$ac_exeext' - { (eval echo "$as_me:15620: \"$ac_try\"") >&5 + { (eval echo "$as_me:16464: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:15623: \$? = $ac_status" >&5 + echo "$as_me:16467: \$? = $ac_status" >&5 (exit $ac_status); }; }; then user_path=`cat conftest.stdpath` else @@ -15644,7 +16488,7 @@ echo $user_path | grep "^$t_bindir" > /dev/null 2>&1 if test $? -ne 0 ; then user_path=$user_path:$t_bindir - echo "$as_me:15647: result: Adding $t_bindir to USER_PATH so scp will work" >&5 + echo "$as_me:16491: result: Adding $t_bindir to USER_PATH so scp will work" >&5 echo "${ECHO_T}Adding $t_bindir to USER_PATH so scp will work" >&6 fi fi @@ -15674,7 +16518,7 @@ fi; -echo "$as_me:15677: checking if we need to convert IPv4 in IPv6-mapped addresses" >&5 +echo "$as_me:16521: checking if we need to convert IPv4 in IPv6-mapped addresses" >&5 echo $ECHO_N "checking if we need to convert IPv4 in IPv6-mapped addresses... $ECHO_C" >&6 IPV4_IN6_HACK_MSG="no" @@ -15683,7 +16527,7 @@ withval="$with_4in6" if test "x$withval" != "xno" ; then - echo "$as_me:15686: result: yes" >&5 + echo "$as_me:16530: result: yes" >&5 echo "${ECHO_T}yes" >&6 cat >>confdefs.h <<\EOF #define IPV4_IN_IPV6 1 @@ -15691,14 +16535,14 @@ IPV4_IN6_HACK_MSG="yes" else - echo "$as_me:15694: result: no" >&5 + echo "$as_me:16538: result: no" >&5 echo "${ECHO_T}no" >&6 fi else if test "x$inet6_default_4in6" = "xyes"; then - echo "$as_me:15701: result: yes (default)" >&5 + echo "$as_me:16545: result: yes (default)" >&5 echo "${ECHO_T}yes (default)" >&6 cat >>confdefs.h <<\EOF #define IPV4_IN_IPV6 1 @@ -15706,7 +16550,7 @@ IPV4_IN6_HACK_MSG="yes" else - echo "$as_me:15709: result: no (default)" >&5 + echo "$as_me:16553: result: no (default)" >&5 echo "${ECHO_T}no (default)" >&6 fi @@ -15735,7 +16579,7 @@ if test ! -d $piddir ; then piddir=`eval echo ${sysconfdir}` case $piddir in - NONE/*) piddir=`echo $piddir | sed "s~NONE~$ac_default_prefix~"` ;; + NONE/*) piddir=`echo $piddir | sed "s~NONE~$ac_default_prefix~"` ;; esac fi @@ -15746,7 +16590,7 @@ if test "x$withval" != "xno" ; then piddir=$withval if test ! -d $piddir ; then - { echo "$as_me:15749: WARNING: ** no $piddir directory on this system **" >&5 + { echo "$as_me:16593: WARNING: ** no $piddir directory on this system **" >&5 echo "$as_me: WARNING: ** no $piddir directory on this system **" >&2;} fi fi @@ -15869,10 +16713,10 @@ fi; -echo "$as_me:15872: checking if your system defines LASTLOG_FILE" >&5 +echo "$as_me:16716: checking if your system defines LASTLOG_FILE" >&5 echo $ECHO_N "checking if your system defines LASTLOG_FILE... $ECHO_C" >&6 cat >conftest.$ac_ext <<_ACEOF -#line 15875 "configure" +#line 16719 "configure" #include "confdefs.h" #include @@ -15896,29 +16740,29 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:15899: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:16743: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:15902: \$? = $ac_status" >&5 + echo "$as_me:16746: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:15905: \"$ac_try\"") >&5 + { (eval echo "$as_me:16749: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:15908: \$? = $ac_status" >&5 + echo "$as_me:16752: \$? = $ac_status" >&5 (exit $ac_status); }; }; then - echo "$as_me:15910: result: yes" >&5 + echo "$as_me:16754: result: yes" >&5 echo "${ECHO_T}yes" >&6 else echo "$as_me: failed program was:" >&5 cat conftest.$ac_ext >&5 - echo "$as_me:15916: result: no" >&5 + echo "$as_me:16760: result: no" >&5 echo "${ECHO_T}no" >&6 - echo "$as_me:15918: checking if your system defines _PATH_LASTLOG" >&5 + echo "$as_me:16762: checking if your system defines _PATH_LASTLOG" >&5 echo $ECHO_N "checking if your system defines _PATH_LASTLOG... $ECHO_C" >&6 cat >conftest.$ac_ext <<_ACEOF -#line 15921 "configure" +#line 16765 "configure" #include "confdefs.h" #include @@ -15939,24 +16783,24 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:15942: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:16786: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:15945: \$? = $ac_status" >&5 + echo "$as_me:16789: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:15948: \"$ac_try\"") >&5 + { (eval echo "$as_me:16792: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:15951: \$? = $ac_status" >&5 + echo "$as_me:16795: \$? = $ac_status" >&5 (exit $ac_status); }; }; then - echo "$as_me:15953: result: yes" >&5 + echo "$as_me:16797: result: yes" >&5 echo "${ECHO_T}yes" >&6 else echo "$as_me: failed program was:" >&5 cat conftest.$ac_ext >&5 - echo "$as_me:15959: result: no" >&5 + echo "$as_me:16803: result: no" >&5 echo "${ECHO_T}no" >&6 system_lastlog_path=no @@ -15974,7 +16818,7 @@ fi done if test -z "$conf_lastlog_location"; then - { echo "$as_me:15977: WARNING: ** Cannot find lastlog **" >&5 + { echo "$as_me:16821: WARNING: ** Cannot find lastlog **" >&5 echo "$as_me: WARNING: ** Cannot find lastlog **" >&2;} fi fi @@ -15987,10 +16831,10 @@ fi -echo "$as_me:15990: checking if your system defines UTMP_FILE" >&5 +echo "$as_me:16834: checking if your system defines UTMP_FILE" >&5 echo $ECHO_N "checking if your system defines UTMP_FILE... $ECHO_C" >&6 cat >conftest.$ac_ext <<_ACEOF -#line 15993 "configure" +#line 16837 "configure" #include "confdefs.h" #include @@ -16008,23 +16852,23 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:16011: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:16855: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:16014: \$? = $ac_status" >&5 + echo "$as_me:16858: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:16017: \"$ac_try\"") >&5 + { (eval echo "$as_me:16861: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:16020: \$? = $ac_status" >&5 + echo "$as_me:16864: \$? = $ac_status" >&5 (exit $ac_status); }; }; then - echo "$as_me:16022: result: yes" >&5 + echo "$as_me:16866: result: yes" >&5 echo "${ECHO_T}yes" >&6 else echo "$as_me: failed program was:" >&5 cat conftest.$ac_ext >&5 - echo "$as_me:16027: result: no" >&5 + echo "$as_me:16871: result: no" >&5 echo "${ECHO_T}no" >&6 system_utmp_path=no @@ -16052,10 +16896,10 @@ fi -echo "$as_me:16055: checking if your system defines WTMP_FILE" >&5 +echo "$as_me:16899: checking if your system defines WTMP_FILE" >&5 echo $ECHO_N "checking if your system defines WTMP_FILE... $ECHO_C" >&6 cat >conftest.$ac_ext <<_ACEOF -#line 16058 "configure" +#line 16902 "configure" #include "confdefs.h" #include @@ -16073,23 +16917,23 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:16076: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:16920: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:16079: \$? = $ac_status" >&5 + echo "$as_me:16923: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:16082: \"$ac_try\"") >&5 + { (eval echo "$as_me:16926: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:16085: \$? = $ac_status" >&5 + echo "$as_me:16929: \$? = $ac_status" >&5 (exit $ac_status); }; }; then - echo "$as_me:16087: result: yes" >&5 + echo "$as_me:16931: result: yes" >&5 echo "${ECHO_T}yes" >&6 else echo "$as_me: failed program was:" >&5 cat conftest.$ac_ext >&5 - echo "$as_me:16092: result: no" >&5 + echo "$as_me:16936: result: no" >&5 echo "${ECHO_T}no" >&6 system_wtmp_path=no @@ -16117,10 +16961,10 @@ fi -echo "$as_me:16120: checking if your system defines UTMPX_FILE" >&5 +echo "$as_me:16964: checking if your system defines UTMPX_FILE" >&5 echo $ECHO_N "checking if your system defines UTMPX_FILE... $ECHO_C" >&6 cat >conftest.$ac_ext <<_ACEOF -#line 16123 "configure" +#line 16967 "configure" #include "confdefs.h" #include @@ -16141,23 +16985,23 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:16144: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:16988: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:16147: \$? = $ac_status" >&5 + echo "$as_me:16991: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:16150: \"$ac_try\"") >&5 + { (eval echo "$as_me:16994: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:16153: \$? = $ac_status" >&5 + echo "$as_me:16997: \$? = $ac_status" >&5 (exit $ac_status); }; }; then - echo "$as_me:16155: result: yes" >&5 + echo "$as_me:16999: result: yes" >&5 echo "${ECHO_T}yes" >&6 else echo "$as_me: failed program was:" >&5 cat conftest.$ac_ext >&5 - echo "$as_me:16160: result: no" >&5 + echo "$as_me:17004: result: no" >&5 echo "${ECHO_T}no" >&6 system_utmpx_path=no @@ -16177,10 +17021,10 @@ fi -echo "$as_me:16180: checking if your system defines WTMPX_FILE" >&5 +echo "$as_me:17024: checking if your system defines WTMPX_FILE" >&5 echo $ECHO_N "checking if your system defines WTMPX_FILE... $ECHO_C" >&6 cat >conftest.$ac_ext <<_ACEOF -#line 16183 "configure" +#line 17027 "configure" #include "confdefs.h" #include @@ -16201,23 +17045,23 @@ } _ACEOF rm -f conftest.$ac_objext -if { (eval echo "$as_me:16204: \"$ac_compile\"") >&5 +if { (eval echo "$as_me:17048: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 ac_status=$? - echo "$as_me:16207: \$? = $ac_status" >&5 + echo "$as_me:17051: \$? = $ac_status" >&5 (exit $ac_status); } && { ac_try='test -s conftest.$ac_objext' - { (eval echo "$as_me:16210: \"$ac_try\"") >&5 + { (eval echo "$as_me:17054: \"$ac_try\"") >&5 (eval $ac_try) 2>&5 ac_status=$? - echo "$as_me:16213: \$? = $ac_status" >&5 + echo "$as_me:17057: \$? = $ac_status" >&5 (exit $ac_status); }; }; then - echo "$as_me:16215: result: yes" >&5 + echo "$as_me:17059: result: yes" >&5 echo "${ECHO_T}yes" >&6 else echo "$as_me: failed program was:" >&5 cat conftest.$ac_ext >&5 - echo "$as_me:16220: result: no" >&5 + echo "$as_me:17064: result: no" >&5 echo "${ECHO_T}no" >&6 system_wtmpx_path=no @@ -16239,7 +17083,7 @@ if test ! -z "$blibpath" ; then LDFLAGS="$LDFLAGS $blibflags$blibpath" - { echo "$as_me:16242: WARNING: Please check and edit blibpath in LDFLAGS in Makefile" >&5 + { echo "$as_me:17086: WARNING: Please check and edit blibpath in LDFLAGS in Makefile" >&5 echo "$as_me: WARNING: Please check and edit blibpath in LDFLAGS in Makefile" >&2;} fi @@ -16331,7 +17175,7 @@ : ${CONFIG_STATUS=./config.status} ac_clean_files_save=$ac_clean_files ac_clean_files="$ac_clean_files $CONFIG_STATUS" -{ echo "$as_me:16334: creating $CONFIG_STATUS" >&5 +{ echo "$as_me:17178: creating $CONFIG_STATUS" >&5 echo "$as_me: creating $CONFIG_STATUS" >&6;} cat >$CONFIG_STATUS <<_ACEOF #! $SHELL @@ -16504,7 +17348,7 @@ echo "$ac_cs_version"; exit 0 ;; --he | --h) # Conflict between --help and --header - { { echo "$as_me:16507: error: ambiguous option: $1 + { { echo "$as_me:17351: error: ambiguous option: $1 Try \`$0 --help' for more information." >&5 echo "$as_me: error: ambiguous option: $1 Try \`$0 --help' for more information." >&2;} @@ -16523,7 +17367,7 @@ ac_need_defaults=false;; # This is an error. - -*) { { echo "$as_me:16526: error: unrecognized option: $1 + -*) { { echo "$as_me:17370: error: unrecognized option: $1 Try \`$0 --help' for more information." >&5 echo "$as_me: error: unrecognized option: $1 Try \`$0 --help' for more information." >&2;} @@ -16563,7 +17407,7 @@ "scard/Makefile" ) CONFIG_FILES="$CONFIG_FILES scard/Makefile" ;; "ssh_prng_cmds" ) CONFIG_FILES="$CONFIG_FILES ssh_prng_cmds" ;; "config.h" ) CONFIG_HEADERS="$CONFIG_HEADERS config.h" ;; - *) { { echo "$as_me:16566: error: invalid argument: $ac_config_target" >&5 + *) { { echo "$as_me:17410: error: invalid argument: $ac_config_target" >&5 echo "$as_me: error: invalid argument: $ac_config_target" >&2;} { (exit 1); exit 1; }; };; esac @@ -16673,6 +17517,7 @@ s,@TEST_MINUS_S_SH@,$TEST_MINUS_S_SH,;t t s,@SH@,$SH,;t t s,@LOGIN_PROGRAM_FALLBACK@,$LOGIN_PROGRAM_FALLBACK,;t t +s,@PATH_PASSWD_PROG@,$PATH_PASSWD_PROG,;t t s,@LD@,$LD,;t t s,@LIBWRAP@,$LIBWRAP,;t t s,@LIBPAM@,$LIBPAM,;t t @@ -16819,7 +17664,7 @@ esac if test x"$ac_file" != x-; then - { echo "$as_me:16822: creating $ac_file" >&5 + { echo "$as_me:17667: creating $ac_file" >&5 echo "$as_me: creating $ac_file" >&6;} rm -f "$ac_file" fi @@ -16837,7 +17682,7 @@ -) echo $tmp/stdin ;; [\\/$]*) # Absolute (can't be DOS-style, as IFS=:) - test -f "$f" || { { echo "$as_me:16840: error: cannot find input file: $f" >&5 + test -f "$f" || { { echo "$as_me:17685: error: cannot find input file: $f" >&5 echo "$as_me: error: cannot find input file: $f" >&2;} { (exit 1); exit 1; }; } echo $f;; @@ -16850,7 +17695,7 @@ echo $srcdir/$f else # /dev/null tree - { { echo "$as_me:16853: error: cannot find input file: $f" >&5 + { { echo "$as_me:17698: error: cannot find input file: $f" >&5 echo "$as_me: error: cannot find input file: $f" >&2;} { (exit 1); exit 1; }; } fi;; @@ -16911,7 +17756,7 @@ * ) ac_file_in=$ac_file.in ;; esac - test x"$ac_file" != x- && { echo "$as_me:16914: creating $ac_file" >&5 + test x"$ac_file" != x- && { echo "$as_me:17759: creating $ac_file" >&5 echo "$as_me: creating $ac_file" >&6;} # First look for the input files in the build tree, otherwise in the @@ -16922,7 +17767,7 @@ -) echo $tmp/stdin ;; [\\/$]*) # Absolute (can't be DOS-style, as IFS=:) - test -f "$f" || { { echo "$as_me:16925: error: cannot find input file: $f" >&5 + test -f "$f" || { { echo "$as_me:17770: error: cannot find input file: $f" >&5 echo "$as_me: error: cannot find input file: $f" >&2;} { (exit 1); exit 1; }; } echo $f;; @@ -16935,7 +17780,7 @@ echo $srcdir/$f else # /dev/null tree - { { echo "$as_me:16938: error: cannot find input file: $f" >&5 + { { echo "$as_me:17783: error: cannot find input file: $f" >&5 echo "$as_me: error: cannot find input file: $f" >&2;} { (exit 1); exit 1; }; } fi;; @@ -16965,7 +17810,7 @@ s,[\\$`],\\&,g t clear : clear -s,^[ ]*#[ ]*define[ ][ ]*\([^ (][^ (]*\)\(([^)]*)\)[ ]*\(.*\)$,${ac_dA}\1${ac_dB}\1\2${ac_dC}\3${ac_dD},gp +s,^[ ]*#[ ]*define[ ][ ]*\(\([^ (][^ (]*\)([^)]*)\)[ ]*\(.*\)$,${ac_dA}\2${ac_dB}\1${ac_dC}\3${ac_dD},gp t end s,^[ ]*#[ ]*define[ ][ ]*\([^ ][^ ]*\)[ ]*\(.*\)$,${ac_dA}\1${ac_dB}\1${ac_dC}\2${ac_dD},gp : end @@ -17052,7 +17897,7 @@ rm -f $tmp/in if test x"$ac_file" != x-; then if cmp -s $ac_file $tmp/config.h 2>/dev/null; then - { echo "$as_me:17055: $ac_file is unchanged" >&5 + { echo "$as_me:17900: $ac_file is unchanged" >&5 echo "$as_me: $ac_file is unchanged" >&6;} else ac_dir=`$as_expr X"$ac_file" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \ @@ -17156,7 +18001,6 @@ echo " sshd superuser user PATH: $J" fi echo " Manpage format: $MANTYPE" -echo " DNS support: $DNS_MSG" echo " PAM support: $PAM_MSG" echo " KerberosV support: $KRB5_MSG" echo " Smartcard support: $SCARD_MSG" diff -ru --new-file openssh-3.7.1p2/configure.ac openssh-3.8p1/configure.ac --- openssh-3.7.1p2/configure.ac 2003-09-23 19:24:21.000000000 +1000 +++ openssh-3.8p1/configure.ac 2004-02-24 16:47:04.000000000 +1100 @@ -1,4 +1,4 @@ -# $Id: configure.ac,v 1.154.2.11 2003/09/23 09:24:21 djm Exp $ +# $Id: configure.ac,v 1.202 2004/02/24 05:47:04 tim Exp $ AC_INIT AC_CONFIG_SRCDIR([ssh.c]) @@ -42,24 +42,39 @@ fi fi +AC_PATH_PROG(PATH_PASSWD_PROG, passwd) +if test ! -z "$PATH_PASSWD_PROG" ; then + AC_DEFINE_UNQUOTED(_PATH_PASSWD_PROG, "$PATH_PASSWD_PROG") +fi + if test -z "$LD" ; then LD=$CC fi AC_SUBST(LD) AC_C_INLINE -if test "$GCC" = "yes" || test "$GCC" = "egcs"; then +if test "$GCC" = "yes" || test "$GCC" = "egcs"; then CFLAGS="$CFLAGS -Wall -Wpointer-arith -Wno-uninitialized" fi +AC_ARG_WITH(rpath, + [ --without-rpath Disable auto-added -R linker paths], + [ + if test "x$withval" = "xno" ; then + need_dash_r="" + fi + if test "x$withval" = "xyes" ; then + need_dash_r=1 + fi + ] +) + # Check for some target-specific stuff case "$host" in *-*-aix*) - CPPFLAGS="$CPPFLAGS -I/usr/local/include" - LDFLAGS="$LDFLAGS -L/usr/local/lib" - AC_MSG_CHECKING([how to specify blibpath for linker ($LD)]) + AC_MSG_CHECKING([how to specify blibpath for linker ($LD)]) if (test -z "$blibpath"); then - blibpath="/usr/lib:/lib:/usr/local/lib" + blibpath="/usr/lib:/lib" fi saved_LDFLAGS="$LDFLAGS" for tryflags in -blibpath: -Wl,-blibpath: -Wl,-rpath, ;do @@ -120,6 +135,9 @@ ;; *-*-dgux*) AC_DEFINE(IP_TOS_IS_BROKEN) + AC_DEFINE(SETEUID_BREAKS_SETUID) + AC_DEFINE(BROKEN_SETREUID) + AC_DEFINE(BROKEN_SETREGID) ;; *-*-darwin*) AC_MSG_CHECKING(if we have working getaddrinfo) @@ -135,6 +153,7 @@ AC_DEFINE(SETEUID_BREAKS_SETUID) AC_DEFINE(BROKEN_SETREUID) AC_DEFINE(BROKEN_SETREGID) + AC_DEFINE_UNQUOTED(BIND_8_COMPAT, 1) ;; *-*-hpux10.26) if test -z "$GCC"; then @@ -146,8 +165,6 @@ AC_DEFINE(USE_PIPES) AC_DEFINE(LOGIN_NO_ENDOPT) AC_DEFINE(LOGIN_NEEDS_UTMPX) - AC_DEFINE(DISABLE_SHADOW) - AC_DEFINE(DISABLE_UTMP) AC_DEFINE(LOCKED_PASSWD_STRING, "*") AC_DEFINE(SPT_TYPE,SPT_PSTAT) LIBS="$LIBS -lsec -lsecpw" @@ -163,8 +180,6 @@ AC_DEFINE(USE_PIPES) AC_DEFINE(LOGIN_NO_ENDOPT) AC_DEFINE(LOGIN_NEEDS_UTMPX) - AC_DEFINE(DISABLE_SHADOW) - AC_DEFINE(DISABLE_UTMP) AC_DEFINE(LOCKED_PASSWD_STRING, "*") AC_DEFINE(SPT_TYPE,SPT_PSTAT) LIBS="$LIBS -lsec" @@ -177,24 +192,26 @@ AC_DEFINE(USE_PIPES) AC_DEFINE(LOGIN_NO_ENDOPT) AC_DEFINE(LOGIN_NEEDS_UTMPX) - AC_DEFINE(DISABLE_SHADOW) AC_DEFINE(DISABLE_UTMP) AC_DEFINE(LOCKED_PASSWD_STRING, "*") AC_DEFINE(SPT_TYPE,SPT_PSTAT) + case "$host" in + *-*-hpux11.11*) + AC_DEFINE(BROKEN_GETADDRINFO);; + esac LIBS="$LIBS -lsec" AC_CHECK_LIB(xnet, t_error, ,AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***])) ;; *-*-irix5*) - CPPFLAGS="$CPPFLAGS -I/usr/local/include" - LDFLAGS="$LDFLAGS" PATH="$PATH:/usr/etc" AC_DEFINE(BROKEN_INET_NTOA) + AC_DEFINE(SETEUID_BREAKS_SETUID) + AC_DEFINE(BROKEN_SETREUID) + AC_DEFINE(BROKEN_SETREGID) AC_DEFINE(WITH_ABBREV_NO_TTY) AC_DEFINE(LOCKED_PASSWD_STRING, "*LK*") ;; *-*-irix6*) - CPPFLAGS="$CPPFLAGS -I/usr/local/include" - LDFLAGS="$LDFLAGS" PATH="$PATH:/usr/etc" AC_DEFINE(WITH_IRIX_ARRAY) AC_DEFINE(WITH_IRIX_PROJECT) @@ -228,7 +245,9 @@ ;; *-*-netbsd*) check_for_libcrypt_before=1 - need_dash_r=1 + if test "x$withval" != "xno" ; then + need_dash_r=1 + fi ;; *-*-freebsd*) check_for_libcrypt_later=1 @@ -247,13 +266,8 @@ AC_DEFINE(BROKEN_REALPATH) AC_DEFINE(USE_PIPES) AC_DEFINE(BROKEN_SAVED_UIDS) - CPPFLAGS="$CPPFLAGS -I/usr/local/include" - CFLAGS="$CFLAGS" ;; *-*-solaris*) - CPPFLAGS="$CPPFLAGS -I/usr/local/include" - LDFLAGS="$LDFLAGS -L/usr/local/lib -R/usr/local/lib" - need_dash_r=1 AC_DEFINE(PAM_SUN_CODEBASE) AC_DEFINE(LOGIN_NEEDS_UTMPX) AC_DEFINE(LOGIN_NEEDS_TERM) @@ -284,8 +298,6 @@ AC_DEFINE(USE_PIPES) ;; *-ncr-sysv*) - CPPFLAGS="$CPPFLAGS -I/usr/local/include" - LDFLAGS="$LDFLAGS -L/usr/local/lib" LIBS="$LIBS -lc89" AC_DEFINE(USE_PIPES) AC_DEFINE(SSHD_ACQUIRES_CTTY) @@ -294,12 +306,14 @@ AC_DEFINE(BROKEN_SETREGID) ;; *-sni-sysv*) - CPPFLAGS="$CPPFLAGS -I/usr/local/include" # /usr/ucblib MUST NOT be searched on ReliantUNIX - LDFLAGS="$LDFLAGS -L/usr/local/lib" + AC_CHECK_LIB(dl, dlsym, ,) IPADDR_IN_DISPLAY=yes AC_DEFINE(USE_PIPES) AC_DEFINE(IP_TOS_IS_BROKEN) + AC_DEFINE(SETEUID_BREAKS_SETUID) + AC_DEFINE(BROKEN_SETREUID) + AC_DEFINE(BROKEN_SETREGID) AC_DEFINE(SSHD_ACQUIRES_CTTY) external_path_file=/etc/default/login # /usr/ucblib/libucb.a no longer needed on ReliantUNIX @@ -307,29 +321,22 @@ # otherwise you will find lots of "SIOCGPGRP errno 22" on syslog ;; *-*-sysv4.2*) - CPPFLAGS="$CPPFLAGS -I/usr/local/include" - LDFLAGS="$LDFLAGS -L/usr/local/lib" AC_DEFINE(USE_PIPES) AC_DEFINE(SETEUID_BREAKS_SETUID) AC_DEFINE(BROKEN_SETREUID) AC_DEFINE(BROKEN_SETREGID) ;; *-*-sysv5*) - CPPFLAGS="$CPPFLAGS -I/usr/local/include" - LDFLAGS="$LDFLAGS -L/usr/local/lib" AC_DEFINE(USE_PIPES) AC_DEFINE(SETEUID_BREAKS_SETUID) AC_DEFINE(BROKEN_SETREUID) AC_DEFINE(BROKEN_SETREGID) ;; *-*-sysv*) - CPPFLAGS="$CPPFLAGS -I/usr/local/include" - LDFLAGS="$LDFLAGS -L/usr/local/lib" ;; *-*-sco3.2v4*) - CPPFLAGS="$CPPFLAGS -Dftruncate=chsize -I/usr/local/include" - LDFLAGS="$LDFLAGS -L/usr/local/lib" - LIBS="$LIBS -los -lprot -lx -ltinfo -lm" + CPPFLAGS="$CPPFLAGS -Dftruncate=chsize" + LIBS="$LIBS -los -lprot -lcrypt_i -lx -ltinfo -lm" RANLIB=true no_dev_ptmx=1 AC_DEFINE(BROKEN_SYS_TERMIO_H) @@ -346,8 +353,6 @@ if test -z "$GCC"; then CFLAGS="$CFLAGS -belf" fi - CPPFLAGS="$CPPFLAGS -I/usr/local/include" - LDFLAGS="$LDFLAGS -L/usr/local/lib" LIBS="$LIBS -lprot -lx -ltinfo -lm" no_dev_ptmx=1 AC_DEFINE(USE_PIPES) @@ -362,6 +367,10 @@ MANTYPE=man ;; *-*-unicosmk*) + AC_DEFINE(NO_SSH_LASTLOG) + AC_DEFINE(SETEUID_BREAKS_SETUID) + AC_DEFINE(BROKEN_SETREUID) + AC_DEFINE(BROKEN_SETREGID) AC_DEFINE(USE_PIPES) AC_DEFINE(DISABLE_FD_PASSING) LDFLAGS="$LDFLAGS" @@ -369,14 +378,20 @@ MANTYPE=cat ;; *-*-unicosmp*) + AC_DEFINE(SETEUID_BREAKS_SETUID) + AC_DEFINE(BROKEN_SETREUID) + AC_DEFINE(BROKEN_SETREGID) AC_DEFINE(WITH_ABBREV_NO_TTY) AC_DEFINE(USE_PIPES) AC_DEFINE(DISABLE_FD_PASSING) LDFLAGS="$LDFLAGS" - LIBS="$LIBS -lgen -lacid" + LIBS="$LIBS -lgen -lacid -ldb" MANTYPE=cat ;; *-*-unicos*) + AC_DEFINE(SETEUID_BREAKS_SETUID) + AC_DEFINE(BROKEN_SETREUID) + AC_DEFINE(BROKEN_SETREGID) AC_DEFINE(USE_PIPES) AC_DEFINE(DISABLE_FD_PASSING) AC_DEFINE(NO_SSH_LASTLOG) @@ -405,14 +420,13 @@ LIBS="$LIBS -lsecurity -ldb -lm -laud" else AC_MSG_RESULT(no) + AC_DEFINE(LOCKED_PASSWD_SUBSTR, "Nologin") fi fi - AC_DEFINE(DISABLE_FD_PASSING) AC_DEFINE(BROKEN_GETADDRINFO) AC_DEFINE(SETEUID_BREAKS_SETUID) AC_DEFINE(BROKEN_SETREUID) AC_DEFINE(BROKEN_SETREGID) - AC_DEFINE(LOCKED_PASSWD_SUBSTR, "Nologin") ;; *-*-nto-qnx) @@ -474,11 +488,11 @@ AC_CHECK_HEADERS(bstring.h crypt.h endian.h features.h floatingpoint.h \ getopt.h glob.h ia.h lastlog.h limits.h login.h \ login_cap.h maillock.h netdb.h netgroup.h \ - netinet/in_systm.h paths.h pty.h readpassphrase.h \ + netinet/in_systm.h pam/pam_appl.h paths.h pty.h readpassphrase.h \ rpc/types.h security/pam_appl.h shadow.h stddef.h stdint.h \ strings.h sys/strtio.h sys/audit.h sys/bitypes.h sys/bsdtty.h \ - sys/cdefs.h sys/mman.h sys/pstat.h sys/select.h sys/stat.h \ - sys/stropts.h sys/sysmacros.h sys/time.h sys/timers.h \ + sys/cdefs.h sys/mman.h sys/pstat.h sys/ptms.h sys/select.h sys/stat.h \ + sys/stream.h sys/stropts.h sys/sysmacros.h sys/time.h sys/timers.h \ sys/un.h time.h tmpdir.h ttyent.h usersec.h \ util.h utime.h utmp.h utmpx.h vis.h) @@ -534,18 +548,6 @@ AC_CHECK_LIB(gen, getspnam, LIBS="$LIBS -lgen")) AC_SEARCH_LIBS(basename, gen, AC_DEFINE(HAVE_BASENAME)) -AC_ARG_WITH(rpath, - [ --without-rpath Disable auto-added -R linker paths], - [ - if test "x$withval" = "xno" ; then - need_dash_r="" - fi - if test "x$withval" = "xyes" ; then - need_dash_r=1 - fi - ] -) - dnl zlib is required AC_ARG_WITH(zlib, [ --with-zlib=PATH Use zlib in PATH], @@ -574,13 +576,70 @@ ] ) -AC_CHECK_LIB(z, deflate, ,AC_MSG_ERROR([*** zlib missing - please install first or check config.log ***])) +AC_CHECK_LIB(z, deflate, , + [ + saved_CPPFLAGS="$CPPFLAGS" + saved_LDFLAGS="$LDFLAGS" + save_LIBS="$LIBS" + dnl Check default zlib install dir + if test -n "${need_dash_r}"; then + LDFLAGS="-L/usr/local/lib -R/usr/local/lib ${saved_LDFLAGS}" + else + LDFLAGS="-L/usr/local/lib ${saved_LDFLAGS}" + fi + CPPFLAGS="-I/usr/local/include ${saved_CPPFLAGS}" + LIBS="$LIBS -lz" + AC_TRY_LINK_FUNC(deflate, AC_DEFINE(HAVE_LIBZ), + [ + AC_MSG_ERROR([*** zlib missing - please install first or check config.log ***]) + ] + ) + ] +) +AC_CHECK_HEADER([zlib.h], ,AC_MSG_ERROR([*** zlib.h missing - please install first or check config.log ***])) + +AC_ARG_WITH(zlib-version-check, + [ --without-zlib-version-check Disable zlib version check], + [ if test "x$withval" = "xno" ; then + zlib_check_nonfatal=1 + fi + ] +) + +AC_MSG_CHECKING(for zlib 1.1.4 or greater) +AC_TRY_RUN([ +#include +int main() +{ + int a, b, c, v; + if (sscanf(ZLIB_VERSION, "%d.%d.%d", &a, &b, &c) != 3) + exit(1); + v = a*1000000 + b*1000 + c; + if (v >= 1001004) + exit(0); + exit(2); +} + ], + AC_MSG_RESULT(yes), + [ AC_MSG_RESULT(no) + if test -z "$zlib_check_nonfatal" ; then + AC_MSG_ERROR([*** zlib too old - check config.log *** +Your reported zlib version has known security problems. It's possible your +vendor has fixed these problems without changing the version number. If you +are sure this is the case, you can disable the check by running +"./configure --without-zlib-version-check". +If you are in doubt, upgrade zlib to version 1.1.4 or greater.]) + else + AC_MSG_WARN([zlib version may have security problems]) + fi + ] +) dnl UnixWare 2.x -AC_CHECK_FUNC(strcasecmp, +AC_CHECK_FUNC(strcasecmp, [], [ AC_CHECK_LIB(resolv, strcasecmp, LIBS="$LIBS -lresolv") ] ) -AC_CHECK_FUNC(utimes, +AC_CHECK_FUNC(utimes, [], [ AC_CHECK_LIB(c89, utimes, [AC_DEFINE(HAVE_UTIMES) LIBS="$LIBS -lc89"]) ] ) @@ -600,7 +659,7 @@ #ifdef GLOB_ALTDIRFUNC FOUNDIT #endif - ], + ], [ AC_DEFINE(GLOB_HAS_ALTDIRFUNC) AC_MSG_RESULT(yes) @@ -613,17 +672,17 @@ # Check for g.gl_matchc glob() extension AC_MSG_CHECKING(for gl_matchc field in glob_t) AC_EGREP_CPP(FOUNDIT, - [ - #include + [ + #include int main(void){glob_t g; g.gl_matchc = 1;} - ], - [ - AC_DEFINE(GLOB_HAS_GL_MATCHC) - AC_MSG_RESULT(yes) - ], - [ - AC_MSG_RESULT(no) - ] + ], + [ + AC_DEFINE(GLOB_HAS_GL_MATCHC) + AC_MSG_RESULT(yes) + ], + [ + AC_MSG_RESULT(no) + ] ) AC_MSG_CHECKING([whether struct dirent allocates space for d_name]) @@ -633,7 +692,7 @@ #include int main(void){struct dirent d;exit(sizeof(d.d_name)<=sizeof(char));} ], - [AC_MSG_RESULT(yes)], + [AC_MSG_RESULT(yes)], [ AC_MSG_RESULT(no) AC_DEFINE(BROKEN_ONE_BYTE_DIRENT_D_NAME) @@ -641,10 +700,10 @@ ) # Check whether user wants S/Key support -SKEY_MSG="no" +SKEY_MSG="no" AC_ARG_WITH(skey, [ --with-skey[[=PATH]] Enable S/Key support - (optionally in PATH)], + (optionally in PATH)], [ if test "x$withval" != "xno" ; then @@ -655,7 +714,7 @@ AC_DEFINE(SKEY) LIBS="-lskey $LIBS" - SKEY_MSG="yes" + SKEY_MSG="yes" AC_MSG_CHECKING([for s/key support]) AC_TRY_RUN( @@ -677,7 +736,7 @@ TCPW_MSG="no" AC_ARG_WITH(tcp-wrappers, [ --with-tcp-wrappers[[=PATH]] Enable tcpwrappers support - (optionally in PATH)], + (optionally in PATH)], [ if test "x$withval" != "xno" ; then saved_LIBS="$LIBS" @@ -729,7 +788,7 @@ dnl Checks for library functions. Please keep in alphabetical order AC_CHECK_FUNCS(\ - arc4random __b64_ntop b64_ntop __b64_pton b64_pton basename \ + arc4random __b64_ntop b64_ntop __b64_pton b64_pton \ bcopy bindresvport_sa clock fchmod fchown freeaddrinfo futimes \ getaddrinfo getcwd getgrouplist getnameinfo getopt \ getpeereid _getpty getrlimit getttyent glob inet_aton \ @@ -737,10 +796,10 @@ mkdtemp mmap ngetaddrinfo nsleep ogetaddrinfo openlog_r openpty \ pstat readpassphrase realpath recvmsg rresvport_af sendmsg \ setdtablesize setegid setenv seteuid setgroups setlogin setpcred \ - setproctitle setregid setresgid setresuid setreuid setrlimit \ + setproctitle setregid setreuid setrlimit \ setsid setvbuf sigaction sigvec snprintf socketpair strerror \ - strlcat strlcpy strmode strnvis sysconf tcgetpgrp \ - truncate utimes vhangup vsnprintf waitpid \ + strlcat strlcpy strmode strnvis strtoul sysconf tcgetpgrp \ + truncate updwtmpx utimes vhangup vsnprintf waitpid \ ) # IRIX has a const char return value for gai_strerror() @@ -767,10 +826,38 @@ dnl tcsendbreak might be a macro AC_CHECK_DECL(tcsendbreak, [AC_DEFINE(HAVE_TCSENDBREAK)], - [AC_CHECK_FUNCS(tcsendbreak)], + [AC_CHECK_FUNCS(tcsendbreak)], [#include ] ) +AC_CHECK_FUNCS(setresuid, [ + dnl Some platorms have setresuid that isn't implemented, test for this + AC_MSG_CHECKING(if setresuid seems to work) + AC_TRY_RUN([ +#include +#include +int main(){errno=0; setresuid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);} + ], + [AC_MSG_RESULT(yes)], + [AC_DEFINE(BROKEN_SETRESUID) + AC_MSG_RESULT(not implemented)] + ) +]) + +AC_CHECK_FUNCS(setresgid, [ + dnl Some platorms have setresgid that isn't implemented, test for this + AC_MSG_CHECKING(if setresgid seems to work) + AC_TRY_RUN([ +#include +#include +int main(){errno=0; setresgid(0,0,0); if (errno==ENOSYS) exit(1); else exit(0);} + ], + [AC_MSG_RESULT(yes)], + [AC_DEFINE(BROKEN_SETRESGID) + AC_MSG_RESULT(not implemented)] + ) +]) + dnl Checks for time functions AC_CHECK_FUNCS(gettimeofday time) dnl Checks for utmp functions @@ -780,12 +867,12 @@ AC_CHECK_FUNCS(endutxent getutxent getutxid getutxline pututxline ) AC_CHECK_FUNCS(setutxent utmpxname) -AC_CHECK_FUNC(daemon, +AC_CHECK_FUNC(daemon, [AC_DEFINE(HAVE_DAEMON)], [AC_CHECK_LIB(bsd, daemon, [LIBS="$LIBS -lbsd"; AC_DEFINE(HAVE_DAEMON)])] ) -AC_CHECK_FUNC(getpagesize, +AC_CHECK_FUNC(getpagesize, [AC_DEFINE(HAVE_GETPAGESIZE)], [AC_CHECK_LIB(ucb, getpagesize, [LIBS="$LIBS -lucb"; AC_DEFINE(HAVE_GETPAGESIZE)])] ) @@ -798,7 +885,7 @@ #include int main(void){char b[5];snprintf(b,5,"123456789");exit(b[4]!='\0');} ], - [AC_MSG_RESULT(yes)], + [AC_MSG_RESULT(yes)], [ AC_MSG_RESULT(no) AC_DEFINE(BROKEN_SNPRINTF) @@ -822,14 +909,14 @@ [ AC_MSG_RESULT(no) ], - [ + [ AC_MSG_RESULT(yes) AC_DEFINE(HAVE_STRICT_MKSTEMP) ], [ AC_MSG_RESULT(yes) AC_DEFINE(HAVE_STRICT_MKSTEMP) - ] + ] ) fi @@ -854,7 +941,7 @@ exit(1); } else if (pid > 0) { /* parent */ waitpid(pid, &status, 0); - if (WIFEXITED(status)) + if (WIFEXITED(status)) exit(WEXITSTATUS(status)); else exit(2); @@ -888,7 +975,8 @@ [ --with-pam Enable PAM support ], [ if test "x$withval" != "xno" ; then - if test "x$ac_cv_header_security_pam_appl_h" != "xyes" ; then + if test "x$ac_cv_header_security_pam_appl_h" != "xyes" && \ + test "x$ac_cv_header_pam_pam_appl_h" != "xyes" ; then AC_MSG_ERROR([PAM headers not found]) fi @@ -897,7 +985,6 @@ AC_CHECK_FUNCS(pam_getenvlist) AC_CHECK_FUNCS(pam_putenv) - disable_shadow=yes PAM_MSG="yes" AC_DEFINE(USE_PAM) @@ -918,9 +1005,13 @@ AC_TRY_COMPILE( [ #include +#if defined(HAVE_SECURITY_PAM_APPL_H) #include - ], - [(void)pam_strerror((pam_handle_t *)NULL, -1);], +#elif defined (HAVE_PAM_PAM_APPL_H) +#include +#endif + ], + [(void)pam_strerror((pam_handle_t *)NULL, -1);], [AC_MSG_RESULT(no)], [ AC_DEFINE(HAVE_OLD_PAM) @@ -930,12 +1021,6 @@ ) fi -# Some systems want crypt() from libcrypt, *not* the version in OpenSSL, -# because the system crypt() is more featureful. -if test "x$check_for_libcrypt_before" = "x1"; then - AC_CHECK_LIB(crypt, crypt) -fi - # Search for OpenSSL saved_CPPFLAGS="$CPPFLAGS" saved_LDFLAGS="$LDFLAGS" @@ -964,7 +1049,7 @@ fi ] ) -LIBS="$LIBS -lcrypto" +LIBS="-lcrypto $LIBS" AC_TRY_LINK_FUNC(RAND_add, AC_DEFINE(HAVE_OPENSSL), [ dnl Check default openssl install dir @@ -991,12 +1076,12 @@ #include #define DATA "conftest.sslincver" int main(void) { - FILE *fd; - int rc; + FILE *fd; + int rc; - fd = fopen(DATA,"w"); - if(fd == NULL) - exit(1); + fd = fopen(DATA,"w"); + if(fd == NULL) + exit(1); if ((rc = fprintf(fd ,"%x (%s)\n", OPENSSL_VERSION_NUMBER, OPENSSL_VERSION_TEXT)) <0) exit(1); @@ -1024,12 +1109,12 @@ #include #define DATA "conftest.ssllibver" int main(void) { - FILE *fd; - int rc; + FILE *fd; + int rc; - fd = fopen(DATA,"w"); - if(fd == NULL) - exit(1); + fd = fopen(DATA,"w"); + if(fd == NULL) + exit(1); if ((rc = fprintf(fd ,"%x (%s)\n", SSLeay(), SSLeay_version(SSLEAY_VERSION))) <0) exit(1); @@ -1066,8 +1151,14 @@ ] ) -# Some Linux systems (Slackware) need crypt() from libcrypt, *not* the -# version in OpenSSL. Skip this for PAM +# Some systems want crypt() from libcrypt, *not* the version in OpenSSL, +# because the system crypt() is more featureful. +if test "x$check_for_libcrypt_before" = "x1"; then + AC_CHECK_LIB(crypt, crypt) +fi + +# Some Linux systems (Slackware) need crypt() from libcrypt, *not* the +# version in OpenSSL. if test "x$check_for_libcrypt_later" = "x1"; then AC_CHECK_LIB(crypt, crypt, LIBS="$LIBS -lcrypt") fi @@ -1101,7 +1192,7 @@ [ --with-rand-helper Use subprocess to gather strong randomness ], [ if test "x$withval" = "xno" ; then - # Force use of OpenSSL's internal RNG, even if + # Force use of OpenSSL's internal RNG, even if # the previous test showed it to be unseeded. if test -z "$OPENSSL_SEEDS_ITSELF" ; then AC_MSG_WARN([*** Forcing use of OpenSSL's non-self-seeding PRNG]) @@ -1238,7 +1329,7 @@ test -d /usr/sbin && PATH=$PATH:/usr/sbin PATH=$PATH:/etc:$OPATH -# These programs are used by the command hashing source to gather entropy +# These programs are used by the command hashing source to gather entropy OSSH_PATH_ENTROPY_PROG(PROG_LS, ls) OSSH_PATH_ENTROPY_PROG(PROG_NETSTAT, netstat) OSSH_PATH_ENTROPY_PROG(PROG_ARP, arp) @@ -1294,8 +1385,8 @@ # More checks for data types AC_CACHE_CHECK([for u_int type], ac_cv_have_u_int, [ AC_TRY_COMPILE( - [ #include ], - [ u_int a; a = 1;], + [ #include ], + [ u_int a; a = 1;], [ ac_cv_have_u_int="yes" ], [ ac_cv_have_u_int="no" ] ) @@ -1307,8 +1398,8 @@ AC_CACHE_CHECK([for intXX_t types], ac_cv_have_intxx_t, [ AC_TRY_COMPILE( - [ #include ], - [ int8_t a; int16_t b; int32_t c; a = b = c = 1;], + [ #include ], + [ int8_t a; int16_t b; int32_t c; a = b = c = 1;], [ ac_cv_have_intxx_t="yes" ], [ ac_cv_have_intxx_t="no" ] ) @@ -1319,12 +1410,12 @@ fi if (test -z "$have_intxx_t" && \ - test "x$ac_cv_header_stdint_h" = "xyes") + test "x$ac_cv_header_stdint_h" = "xyes") then AC_MSG_CHECKING([for intXX_t types in stdint.h]) AC_TRY_COMPILE( - [ #include ], - [ int8_t a; int16_t b; int32_t c; a = b = c = 1;], + [ #include ], + [ int8_t a; int16_t b; int32_t c; a = b = c = 1;], [ AC_DEFINE(HAVE_INTXX_T) AC_MSG_RESULT(yes) @@ -1344,8 +1435,8 @@ #ifdef HAVE_SYS_BITYPES_H # include #endif - ], - [ int64_t a; a = 1;], + ], + [ int64_t a; a = 1;], [ ac_cv_have_int64_t="yes" ], [ ac_cv_have_int64_t="no" ] ) @@ -1356,8 +1447,8 @@ AC_CACHE_CHECK([for u_intXX_t types], ac_cv_have_u_intxx_t, [ AC_TRY_COMPILE( - [ #include ], - [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;], + [ #include ], + [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;], [ ac_cv_have_u_intxx_t="yes" ], [ ac_cv_have_u_intxx_t="no" ] ) @@ -1370,8 +1461,8 @@ if test -z "$have_u_intxx_t" ; then AC_MSG_CHECKING([for u_intXX_t types in sys/socket.h]) AC_TRY_COMPILE( - [ #include ], - [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;], + [ #include ], + [ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;], [ AC_DEFINE(HAVE_U_INTXX_T) AC_MSG_RESULT(yes) @@ -1382,8 +1473,8 @@ AC_CACHE_CHECK([for u_int64_t types], ac_cv_have_u_int64_t, [ AC_TRY_COMPILE( - [ #include ], - [ u_int64_t a; a = 1;], + [ #include ], + [ u_int64_t a; a = 1;], [ ac_cv_have_u_int64_t="yes" ], [ ac_cv_have_u_int64_t="no" ] ) @@ -1396,7 +1487,7 @@ if test -z "$have_u_int64_t" ; then AC_MSG_CHECKING([for u_int64_t type in sys/bitypes.h]) AC_TRY_COMPILE( - [ #include ], + [ #include ], [ u_int64_t a; a = 1], [ AC_DEFINE(HAVE_U_INT64_T) @@ -1411,8 +1502,8 @@ AC_TRY_COMPILE( [ #include - ], - [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1; ], + ], + [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1; ], [ ac_cv_have_uintxx_t="yes" ], [ ac_cv_have_uintxx_t="no" ] ) @@ -1425,8 +1516,8 @@ if test -z "$have_uintxx_t" ; then AC_MSG_CHECKING([for uintXX_t types in stdint.h]) AC_TRY_COMPILE( - [ #include ], - [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1;], + [ #include ], + [ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1;], [ AC_DEFINE(HAVE_UINTXX_T) AC_MSG_RESULT(yes) @@ -1436,25 +1527,25 @@ fi if (test -z "$have_u_intxx_t" || test -z "$have_intxx_t" && \ - test "x$ac_cv_header_sys_bitypes_h" = "xyes") + test "x$ac_cv_header_sys_bitypes_h" = "xyes") then AC_MSG_CHECKING([for intXX_t and u_intXX_t types in sys/bitypes.h]) AC_TRY_COMPILE( [ #include - ], + ], [ int8_t a; int16_t b; int32_t c; u_int8_t e; u_int16_t f; u_int32_t g; a = b = c = e = f = g = 1; - ], + ], [ AC_DEFINE(HAVE_U_INTXX_T) AC_DEFINE(HAVE_INTXX_T) AC_MSG_RESULT(yes) ], [AC_MSG_RESULT(no)] - ) + ) fi @@ -1635,8 +1726,8 @@ AC_CACHE_CHECK([for struct timeval], ac_cv_have_struct_timeval, [ AC_TRY_COMPILE( - [ #include ], - [ struct timeval tv; tv.tv_sec = 1;], + [ #include ], + [ struct timeval tv; tv.tv_sec = 1;], [ ac_cv_have_struct_timeval="yes" ], [ ac_cv_have_struct_timeval="no" ] ) @@ -1676,7 +1767,7 @@ strcpy(expected_out, "9223372036854775807"); snprintf(buf, mazsize, "%lld", num); if(strcmp(buf, expected_out) != 0) - exit(1); + exit(1); exit(0); } #else @@ -1834,8 +1925,8 @@ fi AC_CACHE_CHECK([if libc defines __progname], ac_cv_libc_defines___progname, [ - AC_TRY_LINK([], - [ extern char *__progname; printf("%s", __progname); ], + AC_TRY_LINK([], + [ extern char *__progname; printf("%s", __progname); ], [ ac_cv_libc_defines___progname="yes" ], [ ac_cv_libc_defines___progname="no" ] ) @@ -1847,8 +1938,8 @@ AC_CACHE_CHECK([whether $CC implements __FUNCTION__], ac_cv_cc_implements___FUNCTION__, [ AC_TRY_LINK([ #include -], - [ printf("%s", __FUNCTION__); ], +], + [ printf("%s", __FUNCTION__); ], [ ac_cv_cc_implements___FUNCTION__="yes" ], [ ac_cv_cc_implements___FUNCTION__="no" ] ) @@ -1860,8 +1951,8 @@ AC_CACHE_CHECK([whether $CC implements __func__], ac_cv_cc_implements___func__, [ AC_TRY_LINK([ #include -], - [ printf("%s", __func__); ], +], + [ printf("%s", __func__); ], [ ac_cv_cc_implements___func__="yes" ], [ ac_cv_cc_implements___func__="no" ] ) @@ -1886,8 +1977,8 @@ fi AC_CACHE_CHECK([if libc defines sys_errlist], ac_cv_libc_defines_sys_errlist, [ - AC_TRY_LINK([], - [ extern const char *const sys_errlist[]; printf("%s", sys_errlist[0]);], + AC_TRY_LINK([], + [ extern const char *const sys_errlist[]; printf("%s", sys_errlist[0]);], [ ac_cv_libc_defines_sys_errlist="yes" ], [ ac_cv_libc_defines_sys_errlist="no" ] ) @@ -1898,8 +1989,8 @@ AC_CACHE_CHECK([if libc defines sys_nerr], ac_cv_libc_defines_sys_nerr, [ - AC_TRY_LINK([], - [ extern int sys_nerr; printf("%i", sys_nerr);], + AC_TRY_LINK([], + [ extern int sys_nerr; printf("%i", sys_nerr);], [ ac_cv_libc_defines_sys_nerr="yes" ], [ ac_cv_libc_defines_sys_nerr="no" ] ) @@ -1908,7 +1999,7 @@ AC_DEFINE(HAVE_SYS_NERR) fi -SCARD_MSG="no" +SCARD_MSG="no" # Check whether user wants sectok support AC_ARG_WITH(sectok, [ --with-sectok Enable smartcard support using libsectok], @@ -1934,7 +2025,7 @@ fi AC_DEFINE(SMARTCARD) AC_DEFINE(USE_SECTOK) - SCARD_MSG="yes, using sectok" + SCARD_MSG="yes, using sectok" fi ] ) @@ -1954,65 +2045,76 @@ LDFLAGS="$LDFLAGS $LIBOPENSC_LIBS" AC_DEFINE(SMARTCARD) AC_DEFINE(USE_OPENSC) - SCARD_MSG="yes, using OpenSC" + SCARD_MSG="yes, using OpenSC" fi fi -# Check whether user wants DNS support -DNS_MSG="no" -AC_ARG_WITH(dns, - [ --with-dns Support for fetching keys from DNS (experimental)], - [ - if test "x$withval" != "xno" ; then - DNS_MSG="yes" - AC_DEFINE(DNS) - AC_SEARCH_LIBS(getrrsetbyname, resolv, - [AC_DEFINE(HAVE_GETRRSETBYNAME)], - [ - # Needed by our getrrsetbyname() - AC_SEARCH_LIBS(res_query, resolv) - AC_SEARCH_LIBS(dn_expand, resolv) - AC_CHECK_FUNCS(_getshort _getlong) - AC_CHECK_MEMBER(HEADER.ad, - [AC_DEFINE(HAVE_HEADER_AD)],, - [#include ]) - ]) - fi - ] -) +# Check libraries needed by DNS fingerprint support +AC_SEARCH_LIBS(getrrsetbyname, resolv, + [AC_DEFINE(HAVE_GETRRSETBYNAME)], + [ + # Needed by our getrrsetbyname() + AC_SEARCH_LIBS(res_query, resolv) + AC_SEARCH_LIBS(dn_expand, resolv) + AC_CHECK_FUNCS(_getshort _getlong) + AC_CHECK_MEMBER(HEADER.ad, + [AC_DEFINE(HAVE_HEADER_AD)],, + [#include ]) + ]) # Check whether user wants Kerberos 5 support -KRB5_MSG="no" +KRB5_MSG="no" AC_ARG_WITH(kerberos5, - [ --with-kerberos5=PATH Enable Kerberos 5 support], - [ - if test "x$withval" != "xno" ; then - if test "x$withval" = "xyes" ; then - KRB5ROOT="/usr/local" - else - KRB5ROOT=${withval} - fi + [ --with-kerberos5=PATH Enable Kerberos 5 support], + [ if test "x$withval" != "xno" ; then + if test "x$withval" = "xyes" ; then + KRB5ROOT="/usr/local" + else + KRB5ROOT=${withval} + fi + + AC_DEFINE(KRB5) + KRB5_MSG="yes" + + AC_MSG_CHECKING(for krb5-config) + if test -x $KRB5ROOT/bin/krb5-config ; then + KRB5CONF=$KRB5ROOT/bin/krb5-config + AC_MSG_RESULT($KRB5CONF) + + AC_MSG_CHECKING(for gssapi support) + if $KRB5CONF | grep gssapi >/dev/null ; then + AC_MSG_RESULT(yes) + AC_DEFINE(GSSAPI) + k5confopts=gssapi + else + AC_MSG_RESULT(no) + k5confopts="" + fi + K5CFLAGS="`$KRB5CONF --cflags $k5confopts`" + K5LIBS="`$KRB5CONF --libs $k5confopts`" + CPPFLAGS="$CPPFLAGS $K5CFLAGS" + AC_MSG_CHECKING(whether we are using Heimdal) + AC_TRY_COMPILE([ #include ], + [ char *tmp = heimdal_version; ], + [ AC_MSG_RESULT(yes) + AC_DEFINE(HEIMDAL) ], + AC_MSG_RESULT(no) + ) + else + AC_MSG_RESULT(no) CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include" - LDFLAGS="$LDFLAGS -L${KRB5ROOT}/lib" - AC_DEFINE(KRB5) - KRB5_MSG="yes" - AC_MSG_CHECKING(whether we are using Heimdal) - AC_TRY_COMPILE([ #include ], - [ char *tmp = heimdal_version; ], - [ AC_MSG_RESULT(yes) - AC_DEFINE(HEIMDAL) - K5LIBS="-lkrb5 -ldes -lcom_err -lasn1 -lroken" - ], - [ AC_MSG_RESULT(no) - K5LIBS="-lkrb5 -lk5crypto -lcom_err" - ] - ) - if test ! -z "$need_dash_r" ; then - LDFLAGS="$LDFLAGS -R${KRB5ROOT}/lib" - fi - if test ! -z "$blibpath" ; then - blibpath="$blibpath:${KRB5ROOT}/lib" - fi + LDFLAGS="$LDFLAGS -L${KRB5ROOT}/lib" + AC_MSG_CHECKING(whether we are using Heimdal) + AC_TRY_COMPILE([ #include ], + [ char *tmp = heimdal_version; ], + [ AC_MSG_RESULT(yes) + AC_DEFINE(HEIMDAL) + K5LIBS="-lkrb5 -ldes -lcom_err -lasn1 -lroken" + ], + [ AC_MSG_RESULT(no) + K5LIBS="-lkrb5 -lk5crypto -lcom_err" + ] + ) AC_SEARCH_LIBS(dn_expand, resolv) AC_CHECK_LIB(gssapi,gss_init_sec_context, @@ -2020,7 +2122,7 @@ K5LIBS="-lgssapi $K5LIBS" ], [ AC_CHECK_LIB(gssapi_krb5,gss_init_sec_context, [ AC_DEFINE(GSSAPI) - K5LIBS="-lgssapi_krb5 $K5LIBS" ], + K5LIBS="-lgssapi_krb5 $K5LIBS" ], AC_MSG_WARN([Cannot find any suitable gss-api library - build may fail]), $K5LIBS) ], @@ -2028,10 +2130,10 @@ AC_CHECK_HEADER(gssapi.h, , [ unset ac_cv_header_gssapi_h - CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi" + CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi" AC_CHECK_HEADERS(gssapi.h, , AC_MSG_WARN([Cannot find any suitable gss-api header - build may fail]) - ) + ) ] ) @@ -2040,11 +2142,23 @@ AC_CHECK_HEADER(gssapi_krb5.h, , [ CPPFLAGS="$oldCPP" ]) - KRB5=yes - fi - ] + fi + if test ! -z "$need_dash_r" ; then + LDFLAGS="$LDFLAGS -R${KRB5ROOT}/lib" + fi + if test ! -z "$blibpath" ; then + blibpath="$blibpath:${KRB5ROOT}/lib" + fi + fi + + AC_CHECK_HEADERS(gssapi.h gssapi/gssapi.h) + AC_CHECK_HEADERS(gssapi_krb5.h gssapi/gssapi_krb5.h) + AC_CHECK_HEADERS(gssapi_generic.h gssapi/gssapi_generic.h) + + LIBS="$LIBS $K5LIBS" + AC_SEARCH_LIBS(k_hasafs, kafs, AC_DEFINE(USE_AFS)) + ] ) -LIBS="$LIBS $K5LIBS" # Looking for programs, paths and files @@ -2107,7 +2221,7 @@ if test -z "$no_dev_ptmx" ; then if test "x$disable_ptmx_check" != "xyes" ; then - AC_CHECK_FILE("/dev/ptmx", + AC_CHECK_FILE("/dev/ptmx", [ AC_DEFINE_UNQUOTED(HAVE_DEV_PTMX) have_dev_ptmx=1 @@ -2115,7 +2229,7 @@ ) fi fi -AC_CHECK_FILE("/dev/ptc", +AC_CHECK_FILE("/dev/ptc", [ AC_DEFINE_UNQUOTED(HAVE_DEV_PTS_AND_PTC) have_dev_ptc=1 @@ -2156,13 +2270,13 @@ AC_SUBST(mansubdir) # Check whether to enable MD5 passwords -MD5_MSG="no" +MD5_MSG="no" AC_ARG_WITH(md5-passwords, [ --with-md5-passwords Enable use of MD5 passwords], [ if test "x$withval" != "xno" ; then AC_DEFINE(HAVE_MD5_PASSWORDS) - MD5_MSG="yes" + MD5_MSG="yes" fi ] ) @@ -2202,13 +2316,13 @@ DISPLAY_HACK_MSG="yes" AC_DEFINE(IPADDR_IN_DISPLAY) else - DISPLAY_HACK_MSG="no" + DISPLAY_HACK_MSG="no" AC_ARG_WITH(ipaddr-display, [ --with-ipaddr-display Use ip address instead of hostname in \$DISPLAY], [ if test "x$withval" != "xno" ; then AC_DEFINE(IPADDR_IN_DISPLAY) - DISPLAY_HACK_MSG="yes" + DISPLAY_HACK_MSG="yes" fi ] ) @@ -2232,7 +2346,7 @@ fi # Whether to mess with the default path -SERVER_PATH_MSG="(default)" +SERVER_PATH_MSG="(default)" AC_ARG_WITH(default-path, [ --with-default-path= Specify default \$PATH environment for server], [ @@ -2247,7 +2361,7 @@ $external_path_file .]) fi user_path="$withval" - SERVER_PATH_MSG="$withval" + SERVER_PATH_MSG="$withval" fi ], [ if test "x$external_path_file" = "x/etc/login.conf" ; then @@ -2331,14 +2445,14 @@ AC_MSG_CHECKING([if we need to convert IPv4 in IPv6-mapped addresses]) -IPV4_IN6_HACK_MSG="no" +IPV4_IN6_HACK_MSG="no" AC_ARG_WITH(4in6, [ --with-4in6 Check for and convert IPv4 in IPv6 mapped addresses], [ if test "x$withval" != "xno" ; then AC_MSG_RESULT(yes) AC_DEFINE(IPV4_IN_IPV6) - IPV4_IN6_HACK_MSG="yes" + IPV4_IN6_HACK_MSG="yes" else AC_MSG_RESULT(no) fi @@ -2346,7 +2460,7 @@ if test "x$inet6_default_4in6" = "xyes"; then AC_MSG_RESULT([yes (default)]) AC_DEFINE(IPV4_IN_IPV6) - IPV4_IN6_HACK_MSG="yes" + IPV4_IN6_HACK_MSG="yes" else AC_MSG_RESULT([no (default)]) fi @@ -2371,7 +2485,7 @@ if test ! -d $piddir ; then piddir=`eval echo ${sysconfdir}` case $piddir in - NONE/*) piddir=`echo $piddir | sed "s~NONE~$ac_default_prefix~"` ;; + NONE/*) piddir=`echo $piddir | sed "s~NONE~$ac_default_prefix~"` ;; esac fi @@ -2443,7 +2557,7 @@ [ --disable-pututline disable use of pututline() etc. ([uw]tmp) [no]], [ if test "x$enableval" = "xno" ; then - AC_DEFINE(DISABLE_PUTUTLINE) + AC_DEFINE(DISABLE_PUTUTLINE) fi ] ) @@ -2697,7 +2811,6 @@ echo " sshd superuser user PATH: $J" fi echo " Manpage format: $MANTYPE" -echo " DNS support: $DNS_MSG" echo " PAM support: $PAM_MSG" echo " KerberosV support: $KRB5_MSG" echo " Smartcard support: $SCARD_MSG" @@ -2726,7 +2839,7 @@ if test "x$PAM_MSG" = "xyes" ; then echo "PAM is enabled. You may need to install a PAM control file " echo "for sshd, otherwise password authentication may fail. " - echo "Example PAM control files can be found in the contrib/ " + echo "Example PAM control files can be found in the contrib/ " echo "subdirectory" echo "" fi diff -ru --new-file openssh-3.7.1p2/contrib/README openssh-3.8p1/contrib/README --- openssh-3.7.1p2/contrib/README 2002-09-30 10:40:41.000000000 +1000 +++ openssh-3.8p1/contrib/README 2003-11-21 23:48:56.000000000 +1100 @@ -1,4 +1,4 @@ -Other patches and addons for OpenSSH. Please send submissions to +Other patches and addons for OpenSSH. Please send submissions to djm@mindrot.org Externally maintained @@ -7,7 +7,7 @@ SSH Proxy Command -- connect.c Shun-ichi GOTO has written a very useful ProxyCommand -which allows the use of outbound SSH from behind a SOCKS4, SOCKS5 or +which allows the use of outbound SSH from behind a SOCKS4, SOCKS5 or https CONNECT style proxy server. His page for connect.c has extensive documentation on its use as well as compiled versions for Win32. @@ -47,7 +47,7 @@ mdoc2man.pl: Converts mdoc formated manpages into normal manpages. This can be used -on Solaris machines to provide manpages that are not preformated. +on Solaris machines to provide manpages that are not preformated. Contributed by Mark D. Roth redhat: diff -ru --new-file openssh-3.7.1p2/contrib/aix/buildbff.sh openssh-3.8p1/contrib/aix/buildbff.sh --- openssh-3.7.1p2/contrib/aix/buildbff.sh 2003-08-25 15:01:04.000000000 +1000 +++ openssh-3.8p1/contrib/aix/buildbff.sh 2003-11-21 23:48:56.000000000 +1100 @@ -1,12 +1,12 @@ #!/bin/sh # # buildbff.sh: Create AIX SMIT-installable OpenSSH packages -# $Id: buildbff.sh,v 1.6 2003/08/25 05:01:04 dtucker Exp $ +# $Id: buildbff.sh,v 1.7 2003/11/21 12:48:56 djm Exp $ # # Author: Darren Tucker (dtucker at zip dot com dot au) # This file is placed in the public domain and comes with absolutely # no warranty. -# +# # Based originally on Ben Lindstrom's buildpkg.sh for Solaris # @@ -45,7 +45,7 @@ if [ ! -f Makefile ] then echo "Makefile not found (did you run configure?)" - exit 1 + exit 1 fi # @@ -96,12 +96,12 @@ PRIVSEP_PATH=/var/empty fi -# Clean package build directory +# Clean package build directory rm -rf $objdir/$PKGDIR FAKE_ROOT=$objdir/$PKGDIR/root mkdir -p $FAKE_ROOT -# Start by faking root install +# Start by faking root install echo "Faking root install..." cd $objdir make install-nokeys DESTDIR=$FAKE_ROOT @@ -136,15 +136,15 @@ # # Set ssh and sshd parameters as per config.local # -if [ "${PERMIT_ROOT_LOGIN}" = no ] +if [ "${PERMIT_ROOT_LOGIN}" = no ] then - perl -p -i -e "s/#PermitRootLogin yes/PermitRootLogin no/" \ - $FAKE_ROOT/${sysconfdir}/sshd_config + perl -p -i -e "s/#PermitRootLogin yes/PermitRootLogin no/" \ + $FAKE_ROOT/${sysconfdir}/sshd_config fi if [ "${X11_FORWARDING}" = yes ] then - perl -p -i -e "s/#X11Forwarding no/X11Forwarding yes/" \ - $FAKE_ROOT/${sysconfdir}/sshd_config + perl -p -i -e "s/#X11Forwarding no/X11Forwarding yes/" \ + $FAKE_ROOT/${sysconfdir}/sshd_config fi @@ -190,13 +190,13 @@ echo Creating configs from defaults if necessary. for cfgfile in ssh_config sshd_config ssh_prng_cmds do - if [ ! -f $sysconfdir/\$cfgfile ] - then - echo "Creating \$cfgfile from default" - cp $sysconfdir/\$cfgfile.default $sysconfdir/\$cfgfile - else - echo "\$cfgfile already exists." - fi + if [ ! -f $sysconfdir/\$cfgfile ] + then + echo "Creating \$cfgfile from default" + cp $sysconfdir/\$cfgfile.default $sysconfdir/\$cfgfile + else + echo "\$cfgfile already exists." + fi done echo @@ -244,19 +244,19 @@ # Generate keys unless they already exist echo Creating host keys if required. if [ -f "$sysconfdir/ssh_host_key" ] ; then - echo "$sysconfdir/ssh_host_key already exists, skipping." + echo "$sysconfdir/ssh_host_key already exists, skipping." else - $bindir/ssh-keygen -t rsa1 -f $sysconfdir/ssh_host_key -N "" + $bindir/ssh-keygen -t rsa1 -f $sysconfdir/ssh_host_key -N "" fi if [ -f $sysconfdir/ssh_host_dsa_key ] ; then - echo "$sysconfdir/ssh_host_dsa_key already exists, skipping." + echo "$sysconfdir/ssh_host_dsa_key already exists, skipping." else - $bindir/ssh-keygen -t dsa -f $sysconfdir/ssh_host_dsa_key -N "" + $bindir/ssh-keygen -t dsa -f $sysconfdir/ssh_host_dsa_key -N "" fi if [ -f $sysconfdir/ssh_host_rsa_key ] ; then - echo "$sysconfdir/ssh_host_rsa_key already exists, skipping." -else - $bindir/ssh-keygen -t rsa -f $sysconfdir/ssh_host_rsa_key -N "" + echo "$sysconfdir/ssh_host_rsa_key already exists, skipping." +else + $bindir/ssh-keygen -t rsa -f $sysconfdir/ssh_host_rsa_key -N "" fi echo @@ -369,7 +369,7 @@ rm -f $PKGNAME-$VERSION.bff ( echo "./lpp_name" - find . ! -name lpp_name -a ! -name . -print + find . ! -name lpp_name -a ! -name . -print ) | backup -i -q -f ../$PKGNAME-$VERSION.bff $filelist # diff -ru --new-file openssh-3.7.1p2/contrib/aix/inventory.sh openssh-3.8p1/contrib/aix/inventory.sh --- openssh-3.7.1p2/contrib/aix/inventory.sh 2003-08-26 13:43:13.000000000 +1000 +++ openssh-3.8p1/contrib/aix/inventory.sh 2003-11-21 23:48:56.000000000 +1100 @@ -1,7 +1,7 @@ #!/bin/sh # # inventory.sh -# $Id: inventory.sh,v 1.5 2003/08/26 03:43:13 dtucker Exp $ +# $Id: inventory.sh,v 1.6 2003/11/21 12:48:56 djm Exp $ # # Originally written by Ben Lindstrom, modified by Darren Tucker to use perl # This file is placed into the public domain. @@ -59,5 +59,5 @@ } elsif ( -d $_ ) { # Entry is Directory print "\ttype=DIRECTORY\n"; - } + } }' diff -ru --new-file openssh-3.7.1p2/contrib/caldera/openssh.spec openssh-3.8p1/contrib/caldera/openssh.spec --- openssh-3.7.1p2/contrib/caldera/openssh.spec 2003-09-23 19:26:52.000000000 +1000 +++ openssh-3.8p1/contrib/caldera/openssh.spec 2004-02-24 16:00:04.000000000 +1100 @@ -17,11 +17,11 @@ #old cvs stuff. please update before use. may be deprecated. %define use_stable 1 %if %{use_stable} - %define version 3.7.1p2 + %define version 3.8p1 %define cvs %{nil} %define release 1 %else - %define version 2.9.9p2 + %define version 3.8p1 %define cvs cvs20011009 %define release 0r1 %endif @@ -180,7 +180,6 @@ %configure \ --with-pam \ --with-tcp-wrappers \ - --with-ipv4-default \ --with-privsep-path=%{_var}/empty/sshd \ #leave this line for easy edits. @@ -364,4 +363,4 @@ * Mon Jan 01 1998 ... Template Version: 1.31 -$Id: openssh.spec,v 1.43.2.4 2003/09/23 09:26:52 djm Exp $ +$Id: openssh.spec,v 1.48 2004/02/24 05:00:04 djm Exp $ diff -ru --new-file openssh-3.7.1p2/contrib/caldera/ssh-host-keygen openssh-3.8p1/contrib/caldera/ssh-host-keygen --- openssh-3.7.1p2/contrib/caldera/ssh-host-keygen 2001-04-27 15:50:50.000000000 +1000 +++ openssh-3.8p1/contrib/caldera/ssh-host-keygen 2003-11-21 23:48:57.000000000 +1100 @@ -1,6 +1,6 @@ #! /bin/sh # -# $Id: ssh-host-keygen,v 1.1 2001/04/27 05:50:50 tim Exp $ +# $Id: ssh-host-keygen,v 1.2 2003/11/21 12:48:57 djm Exp $ # # This script is normally run only *once* for a given host # (in a given period of time) -- on updates/upgrades/recovery @@ -12,7 +12,7 @@ keygen=@sshkeygen@ if [ -f $keydir/ssh_host_key -o \ - -f $keydir/ssh_host_key.pub ]; then + -f $keydir/ssh_host_key.pub ]; then echo "You already have an SSH1 RSA host key in $keydir/ssh_host_key." else echo "Generating 1024 bit SSH1 RSA host key." @@ -20,7 +20,7 @@ fi if [ -f $keydir/ssh_host_rsa_key -o \ - -f $keydir/ssh_host_rsa_key.pub ]; then + -f $keydir/ssh_host_rsa_key.pub ]; then echo "You already have an SSH2 RSA host key in $keydir/ssh_host_rsa_key." else echo "Generating 1024 bit SSH2 RSA host key." @@ -28,7 +28,7 @@ fi if [ -f $keydir/ssh_host_dsa_key -o \ - -f $keydir/ssh_host_dsa_key.pub ]; then + -f $keydir/ssh_host_dsa_key.pub ]; then echo "You already have an SSH2 DSA host key in $keydir/ssh_host_dsa_key." else echo "Generating SSH2 DSA host key." diff -ru --new-file openssh-3.7.1p2/contrib/caldera/sshd.init openssh-3.8p1/contrib/caldera/sshd.init --- openssh-3.7.1p2/contrib/caldera/sshd.init 2001-11-04 06:09:33.000000000 +1100 +++ openssh-3.8p1/contrib/caldera/sshd.init 2003-11-21 23:48:57.000000000 +1100 @@ -1,6 +1,6 @@ #! /bin/bash # -# $Id: sshd.init,v 1.3 2001/11/03 19:09:33 tim Exp $ +# $Id: sshd.init,v 1.4 2003/11/21 12:48:57 djm Exp $ # ### BEGIN INIT INFO # Provides: @@ -64,11 +64,11 @@ SVIemptyConfig @sysconfdir@/sshd_config && exit 6 if [ ! \( -f @sysconfdir@/ssh_host_key -a \ - -f @sysconfdir@/ssh_host_key.pub \) -a \ + -f @sysconfdir@/ssh_host_key.pub \) -a \ ! \( -f @sysconfdir@/ssh_host_rsa_key -a \ - -f @sysconfdir@/ssh_host_rsa_key.pub \) -a \ + -f @sysconfdir@/ssh_host_rsa_key.pub \) -a \ ! \( -f @sysconfdir@/ssh_host_dsa_key -a \ - -f @sysconfdir@/ssh_host_dsa_key.pub \) ]; then + -f @sysconfdir@/ssh_host_dsa_key.pub \) ]; then echo "$SVIsubsys: host key not initialized: skipped!" echo "$SVIsubsys: use ssh-host-keygen to generate one!" diff -ru --new-file openssh-3.7.1p2/contrib/cygwin/Makefile openssh-3.8p1/contrib/cygwin/Makefile --- openssh-3.7.1p2/contrib/cygwin/Makefile 1970-01-01 10:00:00.000000000 +1000 +++ openssh-3.8p1/contrib/cygwin/Makefile 2003-11-13 11:28:49.000000000 +1100 @@ -0,0 +1,56 @@ +srcdir=../.. +prefix=/usr +exec_prefix=$(prefix) +bindir=$(prefix)/bin +datadir=$(prefix)/share +docdir=$(datadir)/doc +sshdocdir=$(docdir)/openssh +cygdocdir=$(docdir)/Cygwin +sysconfdir=/etc +defaultsdir=$(sysconfdir)/defaults/etc +PRIVSEP_PATH=/var/empty +INSTALL=/usr/bin/install -c + +DESTDIR= + +all: + @echo + @echo "Use \`make cygwin-postinstall DESTDIR=[package directory]'" + @echo "Be sure having DESTDIR set correctly!" + @echo + +move-config-files: $(DESTDIR)$(sysconfdir)/ssh_config $(DESTDIR)$(sysconfdir)/sshd_config + $(srcdir)/mkinstalldirs $(DESTDIR)$(defaultsdir) + mv $(DESTDIR)$(sysconfdir)/ssh_config $(DESTDIR)$(defaultsdir) + mv $(DESTDIR)$(sysconfdir)/sshd_config $(DESTDIR)$(defaultsdir) + +remove-empty-dir: + rm -rf $(DESTDIR)$(PRIVSEP_PATH) + +install-sshdoc: + $(srcdir)/mkinstalldirs $(DESTDIR)$(sshdocdir) + $(INSTALL) -m 644 $(srcdir)/CREDITS $(DESTDIR)$(sshdocdir)/CREDITS + $(INSTALL) -m 644 $(srcdir)/ChangeLog $(DESTDIR)$(sshdocdir)/ChangeLog + $(INSTALL) -m 644 $(srcdir)/LICENCE $(DESTDIR)$(sshdocdir)/LICENCE + $(INSTALL) -m 644 $(srcdir)/OVERVIEW $(DESTDIR)$(sshdocdir)/OVERVIEW + $(INSTALL) -m 644 $(srcdir)/README $(DESTDIR)$(sshdocdir)/README + $(INSTALL) -m 644 $(srcdir)/README.dns $(DESTDIR)$(sshdocdir)/README.dns + $(INSTALL) -m 644 $(srcdir)/README.privsep $(DESTDIR)$(sshdocdir)/README.privsep + $(INSTALL) -m 644 $(srcdir)/README.smartcard $(DESTDIR)$(sshdocdir)/README.smartcard + $(INSTALL) -m 644 $(srcdir)/RFC.nroff $(DESTDIR)$(sshdocdir)/RFC.nroff + $(INSTALL) -m 644 $(srcdir)/TODO $(DESTDIR)$(sshdocdir)/TODO + $(INSTALL) -m 644 $(srcdir)/WARNING.RNG $(DESTDIR)$(sshdocdir)/WARNING.RNG + +install-cygwindoc: README + $(srcdir)/mkinstalldirs $(DESTDIR)$(cygdocdir) + $(INSTALL) -m 644 README $(DESTDIR)$(cygdocdir)/openssh.README + +install-doc: install-sshdoc install-cygwindoc + +install-scripts: ssh-host-config ssh-user-config + $(srcdir)/mkinstalldirs $(DESTDIR)$(bindir) + $(INSTALL) -m 755 ssh-host-config $(DESTDIR)$(bindir)/ssh-host-config + $(INSTALL) -m 755 ssh-user-config $(DESTDIR)$(bindir)/ssh-user-config + +cygwin-postinstall: move-config-files remove-empty-dir install-doc install-scripts + @echo "Cygwin specific configuration finished." diff -ru --new-file openssh-3.7.1p2/contrib/cygwin/README openssh-3.8p1/contrib/cygwin/README --- openssh-3.7.1p2/contrib/cygwin/README 2003-09-22 12:32:44.000000000 +1000 +++ openssh-3.8p1/contrib/cygwin/README 2004-01-23 21:35:44.000000000 +1100 @@ -1,4 +1,49 @@ -This package is the actual port of OpenSSH to Cygwin 1.5. +This package describes important Cygwin specific stuff concerning OpenSSH. + +The binary package is usually built for recent Cygwin versions and might +not run on older versions. Please check http://cygwin.com/ for information +about current Cygwin releases. + +Build instructions are at the end of the file. + +=========================================================================== +Important change since 3.7.1p2-2: + +The ssh-host-config file doesn't create the /etc/ssh_config and +/etc/sshd_config files from builtin here-scripts anymore, but it uses +skeleton files installed in /etc/defaults/etc. + +Also it now tries hard to create appropriate permissions on files. +Same applies for ssh-user-config. + +After creating the sshd service with ssh-host-config, it's advisable to +call ssh-user-config for all affected users, also already exising user +configurations. In the latter case, file and directory permissions are +checked and changed, if requireed to match the host configuration. + +Important note for Windows 2003 Server users: +--------------------------------------------- + +2003 Server has a funny new feature. When starting services under SYSTEM +account, these services have nearly all user rights which SYSTEM holds... +except for the "Create a token object" right, which is needed to allow +public key authentication :-( + +There's no way around this, except for creating a substitute account which +has the appropriate privileges. Basically, this account should be member +of the administrators group, plus it should have the following user rights: + + Create a token object + Logon as a service + Replace a process level token + Increase Quota + +The ssh-host-config script asks you, if it should create such an account, +called "sshd_server". If you say "no" here, you're on your own. Please +follow the instruction in ssh-host-config exactly if possible. Note that +ssh-user-config sets the permissions on 2003 Server machines dependent of +whether a sshd_server account exists or not. +=========================================================================== =========================================================================== Important change since 3.4p1-2: @@ -58,7 +103,7 @@ If you are installing OpenSSH the first time, you can generate global config files and server keys by running - + /usr/bin/ssh-host-config Note that this binary archive doesn't contain default config files in /etc. @@ -73,10 +118,12 @@ usage: ssh-host-config [OPTION]... Options: - --debug -d Enable shell's debug output. - --yes -y Answer all questions with "yes" automatically. - --no -n Answer all questions with "no" automatically. - --port -p sshd listens on port n. + --debug -d Enable shell's debug output. + --yes -y Answer all questions with "yes" automatically. + --no -n Answer all questions with "no" automatically. + --cygwin -c Use "options" as value for CYGWIN environment var. + --port -p sshd listens on port n. + --pwd -w Use "pwd" as password for user 'sshd_server'. Additionally ssh-host-config now asks if it should install sshd as a service when running under NT/W2K. This requires cygrunsrv installed. @@ -114,54 +161,6 @@ ssh 22/tcp #SSH daemon -=========================================================================== -The following restrictions only apply to Cygwin versions up to 1.3.1 -=========================================================================== - -Authentication to sshd is possible in one of two ways. -You'll have to decide before starting sshd! - -- If you want to authenticate via RSA and you want to login to that - machine to exactly one user account you can do so by running sshd - under that user account. You must change /etc/sshd_config - to contain the following: - - RSAAuthentication yes - - Moreover it's possible to use rhosts and/or rhosts with - RSA authentication by setting the following in sshd_config: - - RhostsAuthentication yes - RhostsRSAAuthentication yes - -- If you want to be able to login to different user accounts you'll - have to start sshd under system account or any other account that - is able to switch user context. Note that administrators are _not_ - able to do that by default! You'll have to give the following - special user rights to the user: - "Act as part of the operating system" - "Replace process level token" - "Increase quotas" - and if used via service manager - "Logon as a service". - - The system account does of course own that user rights by default. - - Unfortunately, if you choose that way, you can only logon with - NT password authentification and you should change - /etc/sshd_config to contain the following: - - PasswordAuthentication yes - RhostsAuthentication no - RhostsRSAAuthentication no - RSAAuthentication no - - However you can login to the user which has started sshd with - RSA authentication anyway. If you want that, change the RSA - authentication setting back to "yes": - - RSAAuthentication yes - Please note that OpenSSH does never use the value of $HOME to search for the users configuration files! It always uses the value of the pw_dir field in /etc/passwd as the home directory. @@ -169,7 +168,7 @@ is used instead! You may use all features of the CYGWIN=ntsec setting the same -way as they are used by the `login' port on sources.redhat.com: +way as they are used by Cygwin's login(1) port: The pw_gecos field may contain an additional field, that begins with (upper case!) "U-", followed by the domain and the username @@ -186,6 +185,8 @@ locuser::1104:513:John Doe,U-user,S-1-5-21-... +Note that the CYGWIN=ntsec setting is required for public key authentication. + SSH2 server and user keys are generated by the `ssh-*-config' scripts as well. @@ -194,15 +195,30 @@ --prefix=/usr \ --sysconfdir=/etc \ - --libexecdir='${exec_prefix}/sbin' - -You must have installed the zlib and openssl packages to be able to + --libexecdir='$(sbindir)' \ + --localstatedir=/var \ + --datadir='$(prefix)/share' \ + --mandir='$(datadir)/man' \ + --with-tcp-wrappers + +If you want to create a Cygwin package, equivalent to the one +in the Cygwin binary distribution, install like this: + + mkdir /tmp/cygwin-ssh + cd $(builddir) + make install DESTDIR=/tmp/cygwin-ssh + cd $(srcdir)/contrib/cygwin + make cygwin-postinstall DESTDIR=/tmp/cygwin-ssh + cd /tmp/cygwin-ssh + find * \! -type d | tar cvjfT my-openssh.tar.bz2 - + +You must have installed the zlib and openssl-devel packages to be able to build OpenSSH! Please send requests, error reports etc. to cygwin@cygwin.com. Have fun, -Corinna Vinschen +Corinna Vinschen Cygwin Developer Red Hat Inc. diff -ru --new-file openssh-3.7.1p2/contrib/cygwin/ssh-host-config openssh-3.8p1/contrib/cygwin/ssh-host-config --- openssh-3.7.1p2/contrib/cygwin/ssh-host-config 2003-09-22 12:32:44.000000000 +1000 +++ openssh-3.8p1/contrib/cygwin/ssh-host-config 2003-11-21 23:48:57.000000000 +1100 @@ -1,6 +1,6 @@ -#!/bin/sh +#!/bin/bash # -# ssh-host-config, Copyright 2000, Red Hat Inc. +# ssh-host-config, Copyright 2000, 2001, 2002, 2003 Red Hat Inc. # # This file is part of the Cygwin port of OpenSSH. @@ -9,10 +9,7 @@ # Directory where the config files are stored SYSCONFDIR=/etc - -# Subdirectory where an old package might be installed -OLDPREFIX=/usr/local -OLDSYSCONFDIR=${OLDPREFIX}/etc +LOCALSTATEDIR=/var progname=$0 auto_answer="" @@ -27,9 +24,11 @@ { if [ "${auto_answer}" = "yes" ] then + echo "$1 (yes/no) yes" return 0 elif [ "${auto_answer}" = "no" ] then + echo "$1 (yes/no) no" return 1 fi @@ -37,7 +36,7 @@ while [ "X${answer}" != "Xyes" -a "X${answer}" != "Xno" ] do echo -n "$1 (yes/no) " - read answer + read -e answer done if [ "X${answer}" = "Xyes" ] then @@ -60,7 +59,7 @@ option=$1 shift - case "$option" in + case "${option}" in -d | --debug ) set -x ;; @@ -73,21 +72,33 @@ auto_answer=no ;; + -c | --cygwin ) + cygwin_value="$1" + shift + ;; + -p | --port ) port_number=$1 shift ;; + -w | --pwd ) + password_value="$1" + shift + ;; + *) echo "usage: ${progname} [OPTION]..." echo echo "This script creates an OpenSSH host configuration." echo echo "Options:" - echo " --debug -d Enable shell's debug output." - echo " --yes -y Answer all questions with \"yes\" automatically." - echo " --no -n Answer all questions with \"no\" automatically." - echo " --port -p sshd listens on port n." + echo " --debug -d Enable shell's debug output." + echo " --yes -y Answer all questions with \"yes\" automatically." + echo " --no -n Answer all questions with \"no\" automatically." + echo " --cygwin -c Use \"options\" as value for CYGWIN environment var." + echo " --port -p sshd listens on port n." + echo " --pwd -w Use \"pwd\" as password for user 'sshd_server'." echo exit 1 ;; @@ -96,8 +107,13 @@ done # Check if running on NT -_sys="`uname -a`" -_nt=`expr "$_sys" : "CYGWIN_NT"` +_sys="`uname`" +_nt=`expr "${_sys}" : "CYGWIN_NT"` +# If running on NT, check if running under 2003 Server or later +if [ ${_nt} -gt 0 ] +then + _nt2003=`uname | awk -F- '{print ( $2 >= 5.2 ) ? 1 : 0;}'` +fi # Check for running ssh/sshd processes first. Refuse to do anything while # some ssh processes are still running @@ -137,87 +153,33 @@ # Create /var/log and /var/log/lastlog if not already existing -if [ -f /var/log ] +if [ -f ${LOCALSTATEDIR}/log ] then - echo "Creating /var/log failed\!" + echo "Creating ${LOCALSTATEDIR}/log failed!" else - if [ ! -d /var/log ] + if [ ! -d ${LOCALSTATEDIR}/log ] then - mkdir -p /var/log + mkdir -p ${LOCALSTATEDIR}/log fi - if [ -d /var/log/lastlog ] + if [ -d ${LOCALSTATEDIR}/log/lastlog ] then - echo "Creating /var/log/lastlog failed\!" - elif [ ! -f /var/log/lastlog ] + chmod 777 ${LOCALSTATEDIR}/log/lastlog + elif [ ! -f ${LOCALSTATEDIR}/log/lastlog ] then - cat /dev/null > /var/log/lastlog + cat /dev/null > ${LOCALSTATEDIR}/log/lastlog + chmod 666 ${LOCALSTATEDIR}/log/lastlog fi fi # Create /var/empty file used as chroot jail for privilege separation -if [ -f /var/empty ] +if [ -f ${LOCALSTATEDIR}/empty ] then - echo "Creating /var/empty failed\!" + echo "Creating ${LOCALSTATEDIR}/empty failed!" else - mkdir -p /var/empty - # On NT change ownership of that dir to user "system" - if [ $_nt -gt 0 ] + mkdir -p ${LOCALSTATEDIR}/empty + if [ ${_nt} -gt 0 ] then - chmod 755 /var/empty - chown system.system /var/empty - fi -fi - -# Check for an old installation in ${OLDPREFIX} unless ${OLDPREFIX} isn't -# the same as ${PREFIX} - -old_install=0 -if [ "${OLDPREFIX}" != "${PREFIX}" ] -then - if [ -f "${OLDPREFIX}/sbin/sshd" ] - then - echo - echo "You seem to have an older installation in ${OLDPREFIX}." - echo - # Check if old global configuration files exist - if [ -f "${OLDSYSCONFDIR}/ssh_host_key" ] - then - if request "Do you want to copy your config files to your new installation?" - then - cp -f ${OLDSYSCONFDIR}/ssh_host_key ${SYSCONFDIR} - cp -f ${OLDSYSCONFDIR}/ssh_host_key.pub ${SYSCONFDIR} - cp -f ${OLDSYSCONFDIR}/ssh_host_dsa_key ${SYSCONFDIR} - cp -f ${OLDSYSCONFDIR}/ssh_host_dsa_key.pub ${SYSCONFDIR} - cp -f ${OLDSYSCONFDIR}/ssh_config ${SYSCONFDIR} - cp -f ${OLDSYSCONFDIR}/sshd_config ${SYSCONFDIR} - fi - fi - if request "Do you want to erase your old installation?" - then - rm -f ${OLDPREFIX}/bin/ssh.exe - rm -f ${OLDPREFIX}/bin/ssh-config - rm -f ${OLDPREFIX}/bin/scp.exe - rm -f ${OLDPREFIX}/bin/ssh-add.exe - rm -f ${OLDPREFIX}/bin/ssh-agent.exe - rm -f ${OLDPREFIX}/bin/ssh-keygen.exe - rm -f ${OLDPREFIX}/bin/slogin - rm -f ${OLDSYSCONFDIR}/ssh_host_key - rm -f ${OLDSYSCONFDIR}/ssh_host_key.pub - rm -f ${OLDSYSCONFDIR}/ssh_host_dsa_key - rm -f ${OLDSYSCONFDIR}/ssh_host_dsa_key.pub - rm -f ${OLDSYSCONFDIR}/ssh_config - rm -f ${OLDSYSCONFDIR}/sshd_config - rm -f ${OLDPREFIX}/man/man1/ssh.1 - rm -f ${OLDPREFIX}/man/man1/scp.1 - rm -f ${OLDPREFIX}/man/man1/ssh-add.1 - rm -f ${OLDPREFIX}/man/man1/ssh-agent.1 - rm -f ${OLDPREFIX}/man/man1/ssh-keygen.1 - rm -f ${OLDPREFIX}/man/man1/slogin.1 - rm -f ${OLDPREFIX}/man/man8/sshd.8 - rm -f ${OLDPREFIX}/sbin/sshd.exe - rm -f ${OLDPREFIX}/sbin/sftp-server.exe - fi - old_install=1 + chmod 755 ${LOCALSTATEDIR}/empty fi fi @@ -255,52 +217,16 @@ fi fi -# Create default ssh_config from here script +# Create default ssh_config from skeleton file in /etc/defaults/etc if [ ! -f "${SYSCONFDIR}/ssh_config" ] then echo "Generating ${SYSCONFDIR}/ssh_config file" - cat > ${SYSCONFDIR}/ssh_config << EOF -# This is the ssh client system-wide configuration file. See -# ssh_config(5) for more information. This file provides defaults for -# users, and the values can be changed in per-user configuration files -# or on the command line. - -# Configuration data is parsed as follows: -# 1. command line options -# 2. user-specific file -# 3. system-wide file -# Any configuration value is only changed the first time it is set. -# Thus, host-specific definitions should be at the beginning of the -# configuration file, and defaults at the end. - -# Site-wide defaults for various options - -# Host * -# ForwardAgent no -# ForwardX11 no -# RhostsRSAAuthentication no -# RSAAuthentication yes -# PasswordAuthentication yes -# HostbasedAuthentication no -# BatchMode no -# CheckHostIP yes -# AddressFamily any -# ConnectTimeout 0 -# StrictHostKeyChecking ask -# IdentityFile ~/.ssh/identity -# IdentityFile ~/.ssh/id_dsa -# IdentityFile ~/.ssh/id_rsa -# Port 22 -# Protocol 2,1 -# Cipher 3des -# Ciphers aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc -# EscapeChar ~ -EOF - if [ "$port_number" != "22" ] + cp ${SYSCONFDIR}/defaults/etc/ssh_config ${SYSCONFDIR}/ssh_config + if [ "${port_number}" != "22" ] then echo "Host localhost" >> ${SYSCONFDIR}/ssh_config - echo " Port $port_number" >> ${SYSCONFDIR}/ssh_config + echo " Port ${port_number}" >> ${SYSCONFDIR}/ssh_config fi fi @@ -322,35 +248,35 @@ # Prior to creating or modifying sshd_config, care for privilege separation -if [ "$privsep_configured" != "yes" ] +if [ "${privsep_configured}" != "yes" ] then - if [ $_nt -gt 0 ] + if [ ${_nt} -gt 0 ] then echo "Privilege separation is set to yes by default since OpenSSH 3.3." echo "However, this requires a non-privileged account called 'sshd'." - echo "For more info on privilege separation read /usr/doc/openssh/README.privsep." + echo "For more info on privilege separation read /usr/share/doc/openssh/README.privsep." echo - if request "Shall privilege separation be used?" + if request "Should privilege separation be used?" then privsep_used=yes grep -q '^sshd:' ${SYSCONFDIR}/passwd && sshd_in_passwd=yes net user sshd >/dev/null 2>&1 && sshd_in_sam=yes - if [ "$sshd_in_passwd" != "yes" ] + if [ "${sshd_in_passwd}" != "yes" ] then - if [ "$sshd_in_sam" != "yes" ] + if [ "${sshd_in_sam}" != "yes" ] then echo "Warning: The following function requires administrator privileges!" - if request "Shall this script create a local user 'sshd' on this machine?" + if request "Should this script create a local user 'sshd' on this machine?" then - dos_var_empty=`cygpath -w /var/empty` - net user sshd /add /fullname:"sshd privsep" "/homedir:$dos_var_empty" /active:no > /dev/null 2>&1 && sshd_in_sam=yes - if [ "$sshd_in_sam" != "yes" ] + dos_var_empty=`cygpath -w ${LOCALSTATEDIR}/empty` + net user sshd /add /fullname:"sshd privsep" "/homedir:${dos_var_empty}" /active:no > /dev/null 2>&1 && sshd_in_sam=yes + if [ "${sshd_in_sam}" != "yes" ] then echo "Warning: Creating the user 'sshd' failed!" fi fi fi - if [ "$sshd_in_sam" != "yes" ] + if [ "${sshd_in_sam}" != "yes" ] then echo "Warning: Can't create user 'sshd' in ${SYSCONFDIR}/passwd!" echo " Privilege separation set to 'no' again!" @@ -365,161 +291,85 @@ fi else # On 9x don't use privilege separation. Since security isn't - # available it just adds useless addtional processes. + # available it just adds useless additional processes. privsep_used=no fi fi -# Create default sshd_config from here script or modify to add the -# missing privsep configuration option +# Create default sshd_config from skeleton files in /etc/defaults/etc or +# modify to add the missing privsep configuration option if [ ! -f "${SYSCONFDIR}/sshd_config" ] then echo "Generating ${SYSCONFDIR}/sshd_config file" - cat > ${SYSCONFDIR}/sshd_config << EOF -# This is the sshd server system-wide configuration file. See -# sshd_config(5) for more information. - -# This sshd was compiled with PATH=/usr/bin:/bin:/usr/sbin:/sbin - -# The strategy used for options in the default sshd_config shipped with -# OpenSSH is to specify options with their default value where -# possible, but leave them commented. Uncommented options change a -# default value. - -Port $port_number -#Protocol 2,1 -#ListenAddress 0.0.0.0 -#ListenAddress :: - -# HostKey for protocol version 1 -#HostKey ${SYSCONFDIR}/ssh_host_key -# HostKeys for protocol version 2 -#HostKey ${SYSCONFDIR}/ssh_host_rsa_key -#HostKey ${SYSCONFDIR}/ssh_host_dsa_key - -# Lifetime and size of ephemeral version 1 server key -#KeyRegenerationInterval 1h -#ServerKeyBits 768 - -# Logging -#obsoletes QuietMode and FascistLogging -#SyslogFacility AUTH -#LogLevel INFO - -# Authentication: - -#LoginGraceTime 2m -#PermitRootLogin yes -# The following setting overrides permission checks on host key files -# and directories. For security reasons set this to "yes" when running -# NT/W2K, NTFS and CYGWIN=ntsec. -StrictModes no - -#RSAAuthentication yes -#PubkeyAuthentication yes -#AuthorizedKeysFile .ssh/authorized_keys - -# For this to work you will also need host keys in ${SYSCONFDIR}/ssh_known_hosts -#RhostsRSAAuthentication no -# similar for protocol version 2 -#HostbasedAuthentication no -# Change to yes if you don't trust ~/.ssh/known_hosts for -# RhostsRSAAuthentication and HostbasedAuthentication -#IgnoreUserKnownHosts no -# Don't read the user's ~/.rhosts and ~/.shosts files -#IgnoreRhosts yes - -# To disable tunneled clear text passwords, change to no here! -#PasswordAuthentication yes -#PermitEmptyPasswords no - -# Change to no to disable s/key passwords -#ChallengeResponseAuthentication yes - -#AllowTcpForwarding yes -#GatewayPorts no -#X11Forwarding no -#X11DisplayOffset 10 -#X11UseLocalhost yes -#PrintMotd yes -#PrintLastLog yes -#KeepAlive yes -#UseLogin no -UsePrivilegeSeparation $privsep_used -#PermitUserEnvironment no -#Compression yes -#ClientAliveInterval 0 -#ClientAliveCountMax 3 -#UseDNS yes -#PidFile /var/run/sshd.pid -#MaxStartups 10 - -# no default banner path -#Banner /some/path - -# override default of no subsystems -Subsystem sftp /usr/sbin/sftp-server -EOF -elif [ "$privsep_configured" != "yes" ] + sed -e "s/^#UsePrivilegeSeparation yes/UsePrivilegeSeparation ${privsep_used}/ + s/^#Port 22/Port ${port_number}/ + s/^#StrictModes yes/StrictModes no/" \ + < ${SYSCONFDIR}/defaults/etc/sshd_config \ + > ${SYSCONFDIR}/sshd_config +elif [ "${privsep_configured}" != "yes" ] then echo >> ${SYSCONFDIR}/sshd_config - echo "UsePrivilegeSeparation $privsep_used" >> ${SYSCONFDIR}/sshd_config + echo "UsePrivilegeSeparation ${privsep_used}" >> ${SYSCONFDIR}/sshd_config fi # Care for services file -if [ $_nt -gt 0 ] +_my_etcdir="/ssh-host-config.$$" +if [ ${_nt} -gt 0 ] then - _wservices="${SYSTEMROOT}\\system32\\drivers\\etc\\services" - _wserv_tmp="${SYSTEMROOT}\\system32\\drivers\\etc\\srv.out.$$" + _win_etcdir="${SYSTEMROOT}\\system32\\drivers\\etc" + _services="${_my_etcdir}/services" + # On NT, 27 spaces, no space after the hash + _spaces=" #" else - _wservices="${WINDIR}\\SERVICES" - _wserv_tmp="${WINDIR}\\SERV.$$" + _win_etcdir="${WINDIR}" + _services="${_my_etcdir}/SERVICES" + # On 9x, 18 spaces (95 is very touchy), a space after the hash + _spaces=" # " fi -_services=`cygpath -u "${_wservices}"` -_serv_tmp=`cygpath -u "${_wserv_tmp}"` +_serv_tmp="${_my_etcdir}/srv.out.$$" -mount -t -f "${_wservices}" "${_services}" -mount -t -f "${_wserv_tmp}" "${_serv_tmp}" +mount -t -f "${_win_etcdir}" "${_my_etcdir}" + +# Depends on the above mount +_wservices=`cygpath -w "${_services}"` # Remove sshd 22/port from services if [ `grep -q 'sshd[ \t][ \t]*22' "${_services}"; echo $?` -eq 0 ] then grep -v 'sshd[ \t][ \t]*22' "${_services}" > "${_serv_tmp}" if [ -f "${_serv_tmp}" ] - then + then if mv "${_serv_tmp}" "${_services}" then - echo "Removing sshd from ${_services}" + echo "Removing sshd from ${_wservices}" else - echo "Removing sshd from ${_services} failed\!" - fi + echo "Removing sshd from ${_wservices} failed!" + fi rm -f "${_serv_tmp}" else - echo "Removing sshd from ${_services} failed\!" + echo "Removing sshd from ${_wservices} failed!" fi fi # Add ssh 22/tcp and ssh 22/udp to services if [ `grep -q 'ssh[ \t][ \t]*22' "${_services}"; echo $?` -ne 0 ] then - awk '{ if ( $2 ~ /^23\/tcp/ ) print "ssh 22/tcp #SSH Remote Login Protocol\nssh 22/udp #SSH Remote Login Protocol"; print $0; }' < "${_services}" > "${_serv_tmp}" - if [ -f "${_serv_tmp}" ] + if awk '{ if ( $2 ~ /^23\/tcp/ ) print "ssh 22/tcp'"${_spaces}"'SSH Remote Login Protocol\nssh 22/udp'"${_spaces}"'SSH Remote Login Protocol"; print $0; }' < "${_services}" > "${_serv_tmp}" then if mv "${_serv_tmp}" "${_services}" then - echo "Added ssh to ${_services}" + echo "Added ssh to ${_wservices}" else - echo "Adding ssh to ${_services} failed\!" + echo "Adding ssh to ${_wservices} failed!" fi rm -f "${_serv_tmp}" else - echo "Adding ssh to ${_services} failed\!" + echo "WARNING: Adding ssh to ${_wservices} failed!" fi fi -umount "${_services}" -umount "${_serv_tmp}" +umount "${_my_etcdir}" # Care for inetd.conf file _inetcnf="${SYSCONFDIR}/inetd.conf" @@ -538,13 +388,13 @@ then if mv "${_inetcnf_tmp}" "${_inetcnf}" then - echo "Removed sshd from ${_inetcnf}" + echo "Removed sshd from ${_inetcnf}" else - echo "Removing sshd from ${_inetcnf} failed\!" + echo "Removing sshd from ${_inetcnf} failed!" fi rm -f "${_inetcnf_tmp}" else - echo "Removing sshd from ${_inetcnf} failed\!" + echo "Removing sshd from ${_inetcnf} failed!" fi fi @@ -562,34 +412,181 @@ fi # On NT ask if sshd should be installed as service -if [ $_nt -gt 0 ] +if [ ${_nt} -gt 0 ] then - echo - echo "Do you want to install sshd as service?" - if request "(Say \"no\" if it's already installed as service)" + # But only if it is not already installed + if ! cygrunsrv -Q sshd > /dev/null 2>&1 then echo - echo "Which value should the environment variable CYGWIN have when" - echo "sshd starts? It's recommended to set at least \"ntsec\" to be" - echo "able to change user context without password." - echo -n "Default is \"binmode ntsec tty\". CYGWIN=" - read _cygwin - [ -z "${_cygwin}" ] && _cygwin="binmode ntsec tty" - if cygrunsrv -I sshd -d "CYGWIN sshd" -p /usr/sbin/sshd -a -D -e "CYGWIN=${_cygwin}" + echo + echo "Warning: The following functions require administrator privileges!" + echo + echo "Do you want to install sshd as service?" + if request "(Say \"no\" if it's already installed as service)" + then + if [ $_nt2003 -gt 0 ] + then + grep -q '^sshd_server:' ${SYSCONFDIR}/passwd && sshd_server_in_passwd=yes + if [ "${sshd_server_in_passwd}" = "yes" ] + then + # Drop sshd_server from passwd since it could have wrong settings + grep -v '^sshd_server:' ${SYSCONFDIR}/passwd > ${SYSCONFDIR}/passwd.$$ + rm -f ${SYSCONFDIR}/passwd + mv ${SYSCONFDIR}/passwd.$$ ${SYSCONFDIR}/passwd + chmod g-w,o-w ${SYSCONFDIR}/passwd + fi + net user sshd_server >/dev/null 2>&1 && sshd_server_in_sam=yes + if [ "${sshd_server_in_sam}" != "yes" ] + then + echo + echo "You appear to be running Windows 2003 Server or later. On 2003 and" + echo "later systems, it's not possible to use the LocalSystem account" + echo "if sshd should allow passwordless logon (e. g. public key authentication)." + echo "If you want to enable that functionality, it's required to create a new" + echo "account 'sshd_server' with special privileges, which is then used to run" + echo "the sshd service under." + echo + echo "Should this script create a new local account 'sshd_server' which has" + if request "the required privileges?" + then + _admingroup=`awk -F: '{if ( $2 == "S-1-5-32-544" ) print $1;}' ${SYSCONFDIR}/group` + if [ -z "${_admingroup}" ] + then + echo "There's no group with SID S-1-5-32-544 (Local administrators group) in" + echo "your ${SYSCONFDIR}/group file. Please regenerate this entry using 'mkgroup -l'" + echo "and restart this script." + exit 1 + fi + dos_var_empty=`cygpath -w ${LOCALSTATEDIR}/empty` + while [ "${sshd_server_in_sam}" != "yes" ] + do + if [ -n "${password_value}" ] + then + _password="${password_value}" + # Allow to ask for password if first try fails + password_value="" + else + echo + echo "Please enter a password for new user 'sshd_server'. Please be sure that" + echo "this password matches the password rules given on your system." + echo -n "Entering no password will exit the configuration. PASSWORD=" + read -e _password + if [ -z "${_password}" ] + then + echo + echo "Exiting configuration. No user sshd_server has been created," + echo "no sshd service installed." + exit 1 + fi + fi + net user sshd_server "${_password}" /add /fullname:"sshd server account" "/homedir:${dos_var_empty}" /yes > /tmp/nu.$$ 2>&1 && sshd_server_in_sam=yes + if [ "${sshd_server_in_sam}" != "yes" ] + then + echo "Creating the user 'sshd_server' failed! Reason:" + cat /tmp/nu.$$ + rm /tmp/nu.$$ + fi + done + net localgroup "${_admingroup}" sshd_server /add > /dev/null 2>&1 && sshd_server_in_admingroup=yes + if [ "${sshd_server_in_admingroup}" != "yes" ] + then + echo "WARNING: Adding user sshd_server to local group ${_admingroup} failed!" + echo "Please add sshd_server to local group ${_admingroup} before" + echo "starting the sshd service!" + echo + fi + passwd_has_expiry_flags=`passwd -v | awk '/^passwd /{print ( $3 >= 1.5 ) ? "yes" : "no";}'` + if [ "${passwd_has_expiry_flags}" != "yes" ] + then + echo + echo "WARNING: User sshd_server has password expiry set to system default." + echo "Please check that password never expires or set it to your needs." + elif ! passwd -e sshd_server + then + echo + echo "WARNING: Setting password expiry for user sshd_server failed!" + echo "Please check that password never expires or set it to your needs." + fi + editrights -a SeAssignPrimaryTokenPrivilege -u sshd_server && + editrights -a SeCreateTokenPrivilege -u sshd_server && + editrights -a SeDenyInteractiveLogonRight -u sshd_server && + editrights -a SeDenyNetworkLogonRight -u sshd_server && + editrights -a SeDenyRemoteInteractiveLogonRight -u sshd_server && + editrights -a SeIncreaseQuotaPrivilege -u sshd_server && + editrights -a SeServiceLogonRight -u sshd_server && + sshd_server_got_all_rights="yes" + if [ "${sshd_server_got_all_rights}" != "yes" ] + then + echo + echo "Assigning the appropriate privileges to user 'sshd_server' failed!" + echo "Can't create sshd service!" + exit 1 + fi + echo + echo "User 'sshd_server' has been created with password '${_password}'." + echo "If you change the password, please keep in mind to change the password" + echo "for the sshd service, too." + echo + echo "Also keep in mind that the user sshd_server needs read permissions on all" + echo "users' .ssh/authorized_keys file to allow public key authentication for" + echo "these users!. (Re-)running ssh-user-config for each user will set the" + echo "required permissions correctly." + echo + fi + fi + if [ "${sshd_server_in_sam}" = "yes" ] + then + mkpasswd -l -u sshd_server | sed -e 's/bash$/false/' >> ${SYSCONFDIR}/passwd + fi + fi + if [ -n "${cygwin_value}" ] + then + _cygwin="${cygwin_value}" + else + echo + echo "Which value should the environment variable CYGWIN have when" + echo "sshd starts? It's recommended to set at least \"ntsec\" to be" + echo "able to change user context without password." + echo -n "Default is \"ntsec\". CYGWIN=" + read -e _cygwin + fi + [ -z "${_cygwin}" ] && _cygwin="ntsec" + if [ $_nt2003 -gt 0 -a "${sshd_server_in_sam}" = "yes" ] + then + if cygrunsrv -I sshd -d "CYGWIN sshd" -p /usr/sbin/sshd -a -D -u sshd_server -w "${_password}" -e "CYGWIN=${_cygwin}" + then + echo + echo "The service has been installed under sshd_server account." + echo "To start the service, call \`net start sshd' or \`cygrunsrv -S sshd'." + fi + else + if cygrunsrv -I sshd -d "CYGWIN sshd" -p /usr/sbin/sshd -a -D -e "CYGWIN=${_cygwin}" + then + echo + echo "The service has been installed under LocalSystem account." + echo "To start the service, call \`net start sshd' or \`cygrunsrv -S sshd'." + fi + fi + fi + # Now check if sshd has been successfully installed. This allows to + # set the ownership of the affected files correctly. + if cygrunsrv -Q sshd > /dev/null 2>&1 then - chown system ${SYSCONFDIR}/ssh* - echo - echo "The service has been installed under LocalSystem account." + if [ $_nt2003 -gt 0 -a "${sshd_server_in_sam}" = "yes" ] + then + _user="sshd_server" + else + _user="system" + fi + chown "${_user}" ${SYSCONFDIR}/ssh* + chown "${_user}".544 ${LOCALSTATEDIR}/empty + if [ -f ${LOCALSTATEDIR}/log/sshd.log ] + then + chown "${_user}".544 ${LOCALSTATEDIR}/log/sshd.log + fi fi fi fi -if [ "${old_install}" = "1" ] -then - echo - echo "Note: If you have used sshd as service or from inetd, don't forget to" - echo " change the path to sshd.exe in the service entry or in inetd.conf." -fi - echo echo "Host configuration finished. Have fun!" diff -ru --new-file openssh-3.7.1p2/contrib/cygwin/ssh-user-config openssh-3.8p1/contrib/cygwin/ssh-user-config --- openssh-3.7.1p2/contrib/cygwin/ssh-user-config 2003-08-22 18:43:48.000000000 +1000 +++ openssh-3.8p1/contrib/cygwin/ssh-user-config 2003-11-13 11:28:49.000000000 +1100 @@ -1,9 +1,12 @@ #!/bin/sh # -# ssh-user-config, Copyright 2000, Red Hat Inc. +# ssh-user-config, Copyright 2000, 2001, 2002, 2003, Red Hat Inc. # # This file is part of the Cygwin port of OpenSSH. +# Directory where the config files are stored +SYSCONFDIR=/etc + progname=$0 auto_answer="" auto_passphrase="no" @@ -33,6 +36,15 @@ fi } +# Check if running on NT +_sys="`uname -a`" +_nt=`expr "$_sys" : "CYGWIN_NT"` +# If running on NT, check if running under 2003 Server or later +if [ $_nt -gt 0 ] +then + _nt2003=`uname | awk -F- '{print ( $2 >= 5.2 ) ? 1 : 0;}'` +fi + # Check options while : @@ -84,27 +96,27 @@ # Ask user if user identity should be generated -if [ ! -f /etc/passwd ] +if [ ! -f ${SYSCONFDIR}/passwd ] then - echo '/etc/passwd is nonexistant. Please generate an /etc/passwd file' + echo "${SYSCONFDIR}/passwd is nonexistant. Please generate an ${SYSCONFDIR}/passwd file" echo 'first using mkpasswd. Check if it contains an entry for you and' echo 'please care for the home directory in your entry as well.' exit 1 fi uid=`id -u` -pwdhome=`awk -F: '{ if ( $3 == '${uid}' ) print $6; }' < /etc/passwd` +pwdhome=`awk -F: '{ if ( $3 == '${uid}' ) print $6; }' < ${SYSCONFDIR}/passwd` if [ "X${pwdhome}" = "X" ] then - echo 'There is no home directory set for you in /etc/passwd.' + echo "There is no home directory set for you in ${SYSCONFDIR}/passwd." echo 'Setting $HOME is not sufficient!' exit 1 fi if [ ! -d "${pwdhome}" ] then - echo "${pwdhome} is set in /etc/passwd as your home directory" + echo "${pwdhome} is set in ${SYSCONFDIR}/passwd as your home directory" echo 'but it is not a valid directory. Cannot create user identity files.' exit 1 fi @@ -114,7 +126,7 @@ if [ "X${pwdhome}" = "X/" ] then # But first raise a warning! - echo 'Your home directory in /etc/passwd is set to root (/). This is not recommended!' + echo "Your home directory in ${SYSCONFDIR}/passwd is set to root (/). This is not recommended!" if request "Would you like to proceed anyway?" then pwdhome='' @@ -123,6 +135,17 @@ fi fi +if [ -d "${pwdhome}" -a $_nt -gt 0 -a -n "`chmod -c g-w,o-w "${pwdhome}"`" ] +then + echo + echo 'WARNING: group and other have been revoked write permission to your home' + echo " directory ${pwdhome}." + echo ' This is required by OpenSSH to allow public key authentication using' + echo ' the key files stored in your .ssh subdirectory.' + echo ' Revert this change ONLY if you know what you are doing!' + echo +fi + if [ -e "${pwdhome}/.ssh" -a ! -d "${pwdhome}/.ssh" ] then echo "${pwdhome}/.ssh is existant but not a directory. Cannot create user identity files." @@ -139,6 +162,21 @@ fi fi +if [ $_nt -gt 0 ] +then + _user="system" + if [ $_nt2003 -gt 0 ] + then + grep -q '^sshd_server:' ${SYSCONFDIR}/passwd && _user="sshd_server" + fi + if ! setfacl -m "u::rwx,u:${_user}:r--,g::---,o::---" "${pwdhome}/.ssh" + then + echo "${pwdhome}/.ssh couldn't be given the correct permissions." + echo "Please try to solve this problem first." + exit 1 + fi +fi + if [ ! -f "${pwdhome}/.ssh/identity" ] then if request "Shall I create an SSH1 RSA identity file for you?" @@ -196,5 +234,17 @@ fi fi +if [ $_nt -gt 0 -a -e "${pwdhome}/.ssh/authorized_keys" ] +then + if ! setfacl -m "u::rw-,u:${_user}:r--,g::---,o::---" "${pwdhome}/.ssh/authorized_keys" + then + echo + echo "WARNING: Setting correct permissions to ${pwdhome}/.ssh/authorized_keys" + echo "failed. Please care for the correct permissions. The minimum requirement" + echo "is, the owner and ${_user} both need read permissions." + echo + fi +fi + echo echo "Configuration finished. Have fun!" diff -ru --new-file openssh-3.7.1p2/contrib/findssl.sh openssh-3.8p1/contrib/findssl.sh --- openssh-3.7.1p2/contrib/findssl.sh 2003-06-24 20:22:10.000000000 +1000 +++ openssh-3.8p1/contrib/findssl.sh 2003-11-21 23:48:56.000000000 +1100 @@ -9,24 +9,24 @@ # Written by Darren Tucker (dtucker at zip dot com dot au) # This file is placed in the public domain. # -# $Id: findssl.sh,v 1.1 2003/06/24 10:22:10 dtucker Exp $ +# $Id: findssl.sh,v 1.2 2003/11/21 12:48:56 djm Exp $ # 2002-07-27: Initial release. # 2002-08-04: Added public domain notice. # 2003-06-24: Incorporated readme, set library paths. First cvs version. # -# "OpenSSL headers do not match your library" are usually caused by +# "OpenSSL headers do not match your library" are usually caused by # OpenSSH's configure picking up an older version of OpenSSL headers # or libraries. You can use the following # procedure to help identify # the cause. -# +# # The output of configure will tell you the versions of the OpenSSL # headers and libraries that were picked up, for example: -# +# # checking OpenSSL header version... 90604f (OpenSSL 0.9.6d 9 May 2002) # checking OpenSSL library version... 90602f (OpenSSL 0.9.6b [engine] 9 Jul 2001) # checking whether OpenSSL's headers match the library... no # configure: error: Your OpenSSL headers do not match your library -# +# # Now run findssl.sh. This should identify the headers and libraries # present and their versions. You should be able to identify the # libraries and headers used and adjust your CFLAGS or remove incorrect @@ -37,7 +37,7 @@ # Searching for OpenSSL header files. # 0x0090604fL /usr/include/openssl/opensslv.h # 0x0090604fL /usr/local/ssl/include/openssl/opensslv.h -# +# # Searching for OpenSSL shared library files. # 0x0090602fL /lib/libcrypto.so.0.9.6b # 0x0090602fL /lib/libcrypto.so.2 @@ -46,11 +46,11 @@ # 0x0090581fL /usr/lib/libcrypto.so.0.9.5a # 0x0090600fL /usr/lib/libcrypto.so.0.9.6 # 0x0090600fL /usr/lib/libcrypto.so.1 -# +# # Searching for OpenSSL static library files. # 0x0090602fL /usr/lib/libcrypto.a # 0x0090604fL /usr/local/ssl/lib/libcrypto.a -# +# # In this example, I gave configure no extra flags, so it's picking up # the OpenSSL header from /usr/include/openssl (90604f) and the library # from /usr/lib/ (90602f). diff -ru --new-file openssh-3.7.1p2/contrib/gnome-ssh-askpass1.c openssh-3.8p1/contrib/gnome-ssh-askpass1.c --- openssh-3.7.1p2/contrib/gnome-ssh-askpass1.c 2002-09-12 14:49:02.000000000 +1000 +++ openssh-3.8p1/contrib/gnome-ssh-askpass1.c 2003-11-21 23:48:56.000000000 +1100 @@ -23,14 +23,14 @@ */ /* - * This is a simple GNOME SSH passphrase grabber. To use it, set the - * environment variable SSH_ASKPASS to point to the location of - * gnome-ssh-askpass before calling "ssh-add < /dev/null". + * This is a simple GNOME SSH passphrase grabber. To use it, set the + * environment variable SSH_ASKPASS to point to the location of + * gnome-ssh-askpass before calling "ssh-add < /dev/null". * * There is only two run-time options: if you set the environment variable * "GNOME_SSH_ASKPASS_GRAB_SERVER=true" then gnome-ssh-askpass will grab - * the X server. If you set "GNOME_SSH_ASKPASS_GRAB_POINTER=true", then the - * pointer will be grabbed too. These may have some benefit to security if + * the X server. If you set "GNOME_SSH_ASKPASS_GRAB_POINTER=true", then the + * pointer will be grabbed too. These may have some benefit to security if * you don't trust your X server. We grab the keyboard always. */ @@ -87,7 +87,7 @@ } entry = gtk_entry_new(); - gtk_box_pack_start(GTK_BOX(GNOME_DIALOG(dialog)->vbox), entry, FALSE, + gtk_box_pack_start(GTK_BOX(GNOME_DIALOG(dialog)->vbox), entry, FALSE, FALSE, 0); gtk_entry_set_visibility(GTK_ENTRY(entry), FALSE); gtk_widget_grab_focus(entry); @@ -105,7 +105,7 @@ /* Grab focus */ if (grab_server) XGrabServer(GDK_DISPLAY()); - if (grab_pointer && gdk_pointer_grab(dialog->window, TRUE, 0, + if (grab_pointer && gdk_pointer_grab(dialog->window, TRUE, 0, NULL, NULL, GDK_CURRENT_TIME)) goto nograb; if (gdk_keyboard_grab(dialog->window, FALSE, GDK_CURRENT_TIME)) diff -ru --new-file openssh-3.7.1p2/contrib/gnome-ssh-askpass2.c openssh-3.8p1/contrib/gnome-ssh-askpass2.c --- openssh-3.7.1p2/contrib/gnome-ssh-askpass2.c 2003-02-24 11:48:23.000000000 +1100 +++ openssh-3.8p1/contrib/gnome-ssh-askpass2.c 2003-11-21 23:48:56.000000000 +1100 @@ -25,14 +25,14 @@ /* GTK2 support by Nalin Dahyabhai */ /* - * This is a simple GNOME SSH passphrase grabber. To use it, set the - * environment variable SSH_ASKPASS to point to the location of - * gnome-ssh-askpass before calling "ssh-add < /dev/null". + * This is a simple GNOME SSH passphrase grabber. To use it, set the + * environment variable SSH_ASKPASS to point to the location of + * gnome-ssh-askpass before calling "ssh-add < /dev/null". * * There is only two run-time options: if you set the environment variable * "GNOME_SSH_ASKPASS_GRAB_SERVER=true" then gnome-ssh-askpass will grab - * the X server. If you set "GNOME_SSH_ASKPASS_GRAB_POINTER=true", then the - * pointer will be grabbed too. These may have some benefit to security if + * the X server. If you set "GNOME_SSH_ASKPASS_GRAB_POINTER=true", then the + * pointer will be grabbed too. These may have some benefit to security if * you don't trust your X server. We grab the keyboard always. */ @@ -103,7 +103,7 @@ message); entry = gtk_entry_new(); - gtk_box_pack_start(GTK_BOX(GTK_DIALOG(dialog)->vbox), entry, FALSE, + gtk_box_pack_start(GTK_BOX(GTK_DIALOG(dialog)->vbox), entry, FALSE, FALSE, 0); gtk_entry_set_visibility(GTK_ENTRY(entry), FALSE); gtk_widget_grab_focus(entry); @@ -124,7 +124,7 @@ if (grab_pointer) { for(;;) { status = gdk_pointer_grab( - (GTK_WIDGET(dialog))->window, TRUE, 0, NULL, + (GTK_WIDGET(dialog))->window, TRUE, 0, NULL, NULL, GDK_CURRENT_TIME); if (status == GDK_GRAB_SUCCESS) break; diff -ru --new-file openssh-3.7.1p2/contrib/redhat/openssh.spec openssh-3.8p1/contrib/redhat/openssh.spec --- openssh-3.7.1p2/contrib/redhat/openssh.spec 2003-09-23 19:26:53.000000000 +1000 +++ openssh-3.8p1/contrib/redhat/openssh.spec 2004-02-24 16:00:05.000000000 +1100 @@ -1,4 +1,4 @@ -%define ver 3.7.1p2 +%define ver 3.8p1 %define rel 1 # OpenSSH privilege separation requires a user & group ID @@ -34,6 +34,11 @@ %{?skip_x11_askpass:%define no_x11_askpass 1} %{?skip_gnome_askpass:%define no_gnome_askpass 1} +# Add option to build without GTK2 for older platforms with only GTK+. +# RedHat <= 7.2 and Red Hat Advanced Server 2.1 are examples. +# rpm -ba|--rebuild --define 'no_gtk2 1' +%{?no_gtk2:%define gtk2 0} + # Is this a build for RHL 6.x or earlier? %{?build_6x:%define build6x 1} @@ -176,6 +181,11 @@ CFLAGS="$RPM_OPT_FLAGS -Os"; export CFLAGS %endif +%if %{kerberos5} +K5DIR=`rpm -ql krb5-devel | grep include/krb5.h | sed 's,\/include\/krb5.h,,'` +echo K5DIR=$K5DIR +%endif + %configure \ --sysconfdir=%{_sysconfdir}/ssh \ --libexecdir=%{_libexecdir}/openssh \ @@ -185,16 +195,17 @@ --with-default-path=/usr/local/bin:/bin:/usr/bin \ --with-superuser-path=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin \ --with-privsep-path=%{_var}/empty/sshd \ + --with-md5-passwords \ %if %{scard} --with-smartcard \ %endif %if %{rescue} - --without-pam --with-md5-passwords \ + --without-pam \ %else --with-pam \ %endif %if %{kerberos5} - --with-kerberos5=/usr/kerberos \ + --with-kerberos5=$K5DIR \ %endif @@ -392,7 +403,7 @@ %changelog * Mon Jun 2 2003 Damien Miller -- Remove noip6 option. This may be controlled at run-time in client config +- Remove noip6 option. This may be controlled at run-time in client config file using new AddressFamily directive * Mon May 12 2003 Damien Miller @@ -552,7 +563,7 @@ * Sun Apr 8 2001 Preston Brown - remove explicit openssl requirement, fixes builddistro issue -- make initscript stop() function wait until sshd really dead to avoid +- make initscript stop() function wait until sshd really dead to avoid races in condrestart * Mon Apr 2 2001 Nalin Dahyabhai diff -ru --new-file openssh-3.7.1p2/contrib/solaris/README openssh-3.8p1/contrib/solaris/README --- openssh-3.7.1p2/contrib/solaris/README 2002-03-12 15:55:54.000000000 +1100 +++ openssh-3.8p1/contrib/solaris/README 2003-11-21 23:48:57.000000000 +1100 @@ -17,7 +17,7 @@ If all goes well you should have a solaris package ready to be installed. -If you have any problems with this script please post them to +If you have any problems with this script please post them to openssh-unix-dev@mindrot.org and I will try to assist you as best as I can. - Ben Lindstrom diff -ru --new-file openssh-3.7.1p2/contrib/solaris/buildpkg.sh openssh-3.8p1/contrib/solaris/buildpkg.sh --- openssh-3.7.1p2/contrib/solaris/buildpkg.sh 2002-07-20 04:57:57.000000000 +1000 +++ openssh-3.8p1/contrib/solaris/buildpkg.sh 2004-01-23 11:10:03.000000000 +1100 @@ -5,7 +5,7 @@ # The following code has been provide under Public Domain License. I really # don't care what you use it for. Just as long as you don't complain to me # nor my employer if you break it. - Ben Lindstrom (mouring@eviladmin.org) -# +# umask 022 # # Options for building the package @@ -13,7 +13,7 @@ # # uncommenting TEST_DIR and using # configure --prefix=/var/tmp --with-privsep-path=/var/tmp/empty -# and +# and # PKGNAME=tOpenSSH should allow testing a package without interfering # with a real OpenSSH package on a system. This is not needed on systems # that support the -R option to pkgadd. @@ -23,9 +23,10 @@ MAKE=${MAKE:="make"} SSHDUID=67 # Default privsep uid SSHDGID=67 # Default privsep gid -# uncomment these next two as needed +# uncomment these next three as needed #PERMIT_ROOT_LOGIN=no #X11_FORWARDING=yes +#USR_LOCAL_IS_SYMLINK=yes # list of system directories we do NOT want to change owner/group/perms # when installing our package SYSTEM_DIR="/etc \ @@ -81,7 +82,7 @@ # we will look for config.local to override the above options [ -s ./config.local ] && . ./config.local -## Start by faking root install +## Start by faking root install echo "Faking root install..." START=`pwd` OPENSSHD_IN=`dirname $0`/opensshd.in @@ -98,20 +99,20 @@ ## Fill in some details, like prefix and sysconfdir for confvar in prefix exec_prefix bindir sbindir libexecdir datadir mandir sysconfdir piddir do - eval $confvar=`grep "^$confvar=" Makefile | cut -d = -f 2` + eval $confvar=`grep "^$confvar=" Makefile | cut -d = -f 2` done ## Collect value of privsep user for confvar in SSH_PRIVSEP_USER do - eval $confvar=`awk '/#define[ \t]'$confvar'/{print $3}' config.h` + eval $confvar=`awk '/#define[ \t]'$confvar'/{print $3}' config.h` done ## Set privsep defaults if not defined if [ -z "$SSH_PRIVSEP_USER" ] then - SSH_PRIVSEP_USER=sshd + SSH_PRIVSEP_USER=sshd fi ## Extract common info requires for the 'info' part of the package. @@ -243,16 +244,16 @@ if egrep '^[ \t]*UsePrivilegeSeparation[ \t]+no' \${PKG_INSTALL_ROOT}/$sysconfdir/sshd_config >/dev/null then - echo "UsePrivilegeSeparation disabled in config, not creating PrivSep user" - echo "or group." + echo "UsePrivilegeSeparation disabled in config, not creating PrivSep user" + echo "or group." else - echo "UsePrivilegeSeparation enabled in config (or defaulting to on)." + echo "UsePrivilegeSeparation enabled in config (or defaulting to on)." - # create group if required - if cut -f1 -d: \${PKG_INSTALL_ROOT}/etc/group | egrep '^'$SSH_PRIVSEP_USER'\$' >/dev/null - then - echo "PrivSep group $SSH_PRIVSEP_USER already exists." - else + # create group if required + if cut -f1 -d: \${PKG_INSTALL_ROOT}/etc/group | egrep '^'$SSH_PRIVSEP_USER'\$' >/dev/null + then + echo "PrivSep group $SSH_PRIVSEP_USER already exists." + else # Use gid of 67 if possible if cut -f3 -d: \${PKG_INSTALL_ROOT}/etc/group | egrep '^'$SSHDGID'\$' >/dev/null then @@ -260,15 +261,15 @@ else sshdgid="-g $SSHDGID" fi - echo "Creating PrivSep group $SSH_PRIVSEP_USER." - \$chroot /usr/sbin/groupadd \$sshdgid $SSH_PRIVSEP_USER - fi - - # Create user if required - if cut -f1 -d: \${PKG_INSTALL_ROOT}/etc/passwd | egrep '^'$SSH_PRIVSEP_USER'\$' >/dev/null - then - echo "PrivSep user $SSH_PRIVSEP_USER already exists." - else + echo "Creating PrivSep group $SSH_PRIVSEP_USER." + \$chroot /usr/sbin/groupadd \$sshdgid $SSH_PRIVSEP_USER + fi + + # Create user if required + if cut -f1 -d: \${PKG_INSTALL_ROOT}/etc/passwd | egrep '^'$SSH_PRIVSEP_USER'\$' >/dev/null + then + echo "PrivSep user $SSH_PRIVSEP_USER already exists." + else # Use uid of 67 if possible if cut -f3 -d: \${PKG_INSTALL_ROOT}/etc/passwd | egrep '^'$SSHDGID'\$' >/dev/null then @@ -276,10 +277,10 @@ else sshduid="-u $SSHDUID" fi - echo "Creating PrivSep user $SSH_PRIVSEP_USER." + echo "Creating PrivSep user $SSH_PRIVSEP_USER." \$chroot /usr/sbin/useradd -c 'SSHD PrivSep User' -s /bin/false -g $SSH_PRIVSEP_USER \$sshduid $SSH_PRIVSEP_USER \$chroot /usr/bin/passwd -l $SSH_PRIVSEP_USER - fi + fi fi [ "\${POST_INS_START}" = "yes" ] && ${TEST_DIR}/etc/init.d/${SYSVINIT_NAME} start @@ -358,18 +359,24 @@ BEGIN { print "i pkginfo"; print "i preinstall"; \\ print "i postinstall"; print "i preremove"; \\ print "i request"; print "i space"; \\ - split("$SYSTEM_DIR",sys_files); } + split("$SYSTEM_DIR",sys_files); } { for (dir in sys_files) { if ( \$3 != sys_files[dir] ) - { \$5="root"; \$6="sys"; } - else - { \$4="?"; \$5="?"; \$6="?"; break;} + { \$5="root"; \$6="sys"; } + else + { \$4="?"; \$5="?"; \$6="?"; break;} } } { print; } _EOF find . | egrep -v "prototype|pkginfo|mk-proto.awk" | sort | \ pkgproto $PROTO_ARGS | nawk -f mk-proto.awk > prototype +# /usr/local is a symlink on some systems +[ "${USR_LOCAL_IS_SYMLINK}" = yes ] && { + grep -v "^d none /usr/local ? ? ?$" prototype > prototype.new + mv prototype.new prototype +} + ## Step back a directory and now build the package. echo "Building package.." cd .. diff -ru --new-file openssh-3.7.1p2/contrib/solaris/opensshd.in openssh-3.8p1/contrib/solaris/opensshd.in --- openssh-3.7.1p2/contrib/solaris/opensshd.in 2002-11-14 10:50:07.000000000 +1100 +++ openssh-3.8p1/contrib/solaris/opensshd.in 2003-11-21 23:48:57.000000000 +1100 @@ -22,24 +22,24 @@ checkkeys() { if [ ! -f $HOST_KEY_RSA1 ]; then - ${SSH_KEYGEN} -t rsa1 -f ${HOST_KEY_RSA1} -N "" + ${SSH_KEYGEN} -t rsa1 -f ${HOST_KEY_RSA1} -N "" fi if [ ! -f $HOST_KEY_DSA ]; then - ${SSH_KEYGEN} -t dsa -f ${HOST_KEY_DSA} -N "" + ${SSH_KEYGEN} -t dsa -f ${HOST_KEY_DSA} -N "" fi if [ ! -f $HOST_KEY_RSA ]; then - ${SSH_KEYGEN} -t rsa -f ${HOST_KEY_RSA} -N "" + ${SSH_KEYGEN} -t rsa -f ${HOST_KEY_RSA} -N "" fi } stop_service() { if [ -r $PIDFILE -a ! -z ${PIDFILE} ]; then - PID=`${CAT} ${PIDFILE}` + PID=`${CAT} ${PIDFILE}` fi if [ ${PID:=0} -gt 1 -a ! "X$PID" = "X " ]; then - ${KILL} ${PID} + ${KILL} ${PID} else - echo "Unable to read PID file" + echo "Unable to read PID file" fi } @@ -55,8 +55,8 @@ sshd_rc=$? if [ $sshd_rc -ne 0 ]; then - echo "$0: Error ${sshd_rc} starting ${SSHD}... bailing." - exit $sshd_rc + echo "$0: Error ${sshd_rc} starting ${SSHD}... bailing." + exit $sshd_rc fi echo done. } diff -ru --new-file openssh-3.7.1p2/contrib/ssh-copy-id openssh-3.8p1/contrib/ssh-copy-id --- openssh-3.7.1p2/contrib/ssh-copy-id 2003-01-03 14:34:07.000000000 +1100 +++ openssh-3.8p1/contrib/ssh-copy-id 2004-01-05 08:16:34.000000000 +1100 @@ -38,7 +38,7 @@ exit 1 fi -{ eval "$GET_ID" ; } | ssh $1 "umask 077; test -d .ssh || mkdir .ssh ; cat >> .ssh/authorized_keys" +{ eval "$GET_ID" ; } | ssh $1 "umask 077; test -d .ssh || mkdir .ssh ; cat >> .ssh/authorized_keys" || exit 1 cat <&2 fi if [ ! -f /etc/ssh/ssh_host_dsa_key -o ! -s /etc/ssh/ssh_host_dsa_key ]; then - echo "Generating SSH DSA host key..." + echo "Generating SSH DSA host key..." /usr/bin/ssh-keygen -d -f /etc/ssh/ssh_host_dsa_key -N '' >&2 fi if test -r /var/run/sshd.pid then - echo "Restarting the running SSH daemon..." + echo "Restarting the running SSH daemon..." /usr/sbin/rcsshd restart >&2 fi %preun if [ "$1" = 0 ] then - echo "Stopping the SSH daemon..." + echo "Stopping the SSH daemon..." /usr/sbin/rcsshd stop >&2 echo "Removing SSH stop/start scripts from the rc directories..." - rm /sbin/init.d/rc2.d/K20sshd - rm /sbin/init.d/rc2.d/S20sshd - rm /sbin/init.d/rc3.d/K20sshd - rm /sbin/init.d/rc3.d/S20sshd + rm /sbin/init.d/rc2.d/K20sshd + rm /sbin/init.d/rc2.d/S20sshd + rm /sbin/init.d/rc3.d/K20sshd + rm /sbin/init.d/rc3.d/S20sshd fi %files %defattr(-,root,root) -%doc ChangeLog OVERVIEW README* +%doc ChangeLog OVERVIEW README* %doc RFC.nroff TODO CREDITS LICENCE %attr(0755,root,root) %dir /etc/ssh %attr(0644,root,root) %config /etc/ssh/ssh_config Binary files openssh-3.7.1p2/crc32.o and openssh-3.8p1/crc32.o differ Binary files openssh-3.7.1p2/deattack.o and openssh-3.8p1/deattack.o differ diff -ru --new-file openssh-3.7.1p2/defines.h openssh-3.8p1/defines.h --- openssh-3.7.1p2/defines.h 2003-09-16 11:52:19.000000000 +1000 +++ openssh-3.8p1/defines.h 2004-02-10 13:01:14.000000000 +1100 @@ -25,7 +25,7 @@ #ifndef _DEFINES_H #define _DEFINES_H -/* $Id: defines.h,v 1.103 2003/09/16 01:52:19 dtucker Exp $ */ +/* $Id: defines.h,v 1.110 2004/02/10 02:01:14 dtucker Exp $ */ /* Constants */ @@ -84,7 +84,7 @@ # define S_ISDIR(mode) (((mode) & (_S_IFMT)) == (_S_IFDIR)) #endif /* S_ISDIR */ -#ifndef S_ISREG +#ifndef S_ISREG # define S_ISREG(mode) (((mode) & (_S_IFMT)) == (_S_IFREG)) #endif /* S_ISREG */ @@ -129,6 +129,10 @@ #define INADDR_LOOPBACK ((u_long)0x7f000001) #endif +#ifndef __unused +#define __unused +#endif + /* Types */ /* If sys/types.h does not supply intXX_t, supply them ourselves */ @@ -240,6 +244,7 @@ #ifndef HAVE_SIZE_T typedef unsigned int size_t; # define HAVE_SIZE_T +# define SIZE_T_MAX UINT_MAX #endif /* HAVE_SIZE_T */ #ifndef HAVE_SSIZE_T @@ -529,6 +534,14 @@ # define krb5_get_err_text(context,code) error_message(code) #endif +/* Maximum number of file descriptors available */ +#ifdef HAVE_SYSCONF +# define SSH_SYSFDMAX sysconf(_SC_OPEN_MAX) +#else +# define SSH_SYSFDMAX 10000 +#endif + + /* * Define this to use pipes instead of socketpairs for communicating with the * client program. Socketpairs do not seem to work on all systems. @@ -572,6 +585,9 @@ # endif #endif +#if defined(HAVE_SHADOW_H) && !defined(DISABLE_SHADOW) +# define USE_SHADOW +#endif /* The login() library function in libutil is first choice */ #if defined(HAVE_LOGIN) && !defined(DISABLE_LOGIN) diff -ru --new-file openssh-3.7.1p2/dh.c openssh-3.8p1/dh.c --- openssh-3.7.1p2/dh.c 2003-05-14 13:40:07.000000000 +1000 +++ openssh-3.8p1/dh.c 2003-12-17 16:33:53.000000000 +1100 @@ -23,7 +23,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: dh.c,v 1.24 2003/04/08 20:21:28 itojun Exp $"); +RCSID("$OpenBSD: dh.c,v 1.26 2003/12/16 15:51:54 markus Exp $"); #include "xmalloc.h" @@ -198,7 +198,7 @@ if (dh->p == NULL) fatal("dh_gen_key: dh->p == NULL"); - if (2*need >= BN_num_bits(dh->p)) + if (need > INT_MAX / 2 || 2 * need >= BN_num_bits(dh->p)) fatal("dh_gen_key: group too small: %d (2*need %d)", BN_num_bits(dh->p), 2*need); do { @@ -279,11 +279,9 @@ dh_estimate(int bits) { - if (bits < 64) - return (512); /* O(2**63) */ - if (bits < 128) + if (bits <= 128) return (1024); /* O(2**86) */ - if (bits < 192) + if (bits <= 192) return (2048); /* O(2**116) */ return (4096); /* O(2**156) */ } Binary files openssh-3.7.1p2/dh.o and openssh-3.8p1/dh.o differ Binary files openssh-3.7.1p2/dispatch.o and openssh-3.8p1/dispatch.o differ diff -ru --new-file openssh-3.7.1p2/dns.c openssh-3.8p1/dns.c --- openssh-3.7.1p2/dns.c 2003-06-11 22:05:45.000000000 +1000 +++ openssh-3.8p1/dns.c 2003-11-21 23:48:55.000000000 +1100 @@ -1,4 +1,4 @@ -/* $OpenBSD: dns.c,v 1.6 2003/06/11 10:18:47 jakob Exp $ */ +/* $OpenBSD: dns.c,v 1.9 2003/11/21 11:57:03 djm Exp $ */ /* * Copyright (c) 2003 Wesley Griffin. All rights reserved. @@ -28,7 +28,6 @@ #include "includes.h" -#ifdef DNS #include #ifdef LWRES #include @@ -44,7 +43,7 @@ #include "uuencode.h" extern char *__progname; -RCSID("$OpenBSD: dns.c,v 1.6 2003/06/11 10:18:47 jakob Exp $"); +RCSID("$OpenBSD: dns.c,v 1.9 2003/11/21 11:57:03 djm Exp $"); #ifndef LWRES static const char *errset_text[] = { @@ -84,7 +83,7 @@ */ static int dns_read_key(u_int8_t *algorithm, u_int8_t *digest_type, - u_char **digest, u_int *digest_len, Key *key) + u_char **digest, u_int *digest_len, const Key *key) { int success = 0; @@ -146,16 +145,15 @@ /* * Verify the given hostname, address and host key using DNS. - * Returns 0 if key verifies or -1 if key does NOT verify + * Returns 0 if lookup succeeds, -1 otherwise */ int verify_host_key_dns(const char *hostname, struct sockaddr *address, - Key *hostkey) + const Key *hostkey, int *flags) { int counter; int result; struct rrsetinfo *fingerprints = NULL; - int failures = 0; u_int8_t hostkey_algorithm; u_int8_t hostkey_digest_type; @@ -167,6 +165,7 @@ u_char *dnskey_digest; u_int dnskey_digest_len; + *flags = 0; debug3("verify_hostkey_dns"); if (hostkey == NULL) @@ -176,28 +175,29 @@ DNS_RDATATYPE_SSHFP, 0, &fingerprints); if (result) { verbose("DNS lookup error: %s", dns_result_totext(result)); - return DNS_VERIFY_ERROR; + return -1; } -#ifdef DNSSEC - /* Only accept validated answers */ - if (!fingerprints->rri_flags & RRSET_VALIDATED) { - error("Ignored unvalidated fingerprint from DNS."); - freerrset(fingerprints); - return DNS_VERIFY_ERROR; + if (fingerprints->rri_flags & RRSET_VALIDATED) { + *flags |= DNS_VERIFY_SECURE; + debug("found %d secure fingerprints in DNS", + fingerprints->rri_nrdatas); + } else { + debug("found %d insecure fingerprints in DNS", + fingerprints->rri_nrdatas); } -#endif - - debug("found %d fingerprints in DNS", fingerprints->rri_nrdatas); /* Initialize host key parameters */ if (!dns_read_key(&hostkey_algorithm, &hostkey_digest_type, &hostkey_digest, &hostkey_digest_len, hostkey)) { error("Error calculating host key fingerprint."); freerrset(fingerprints); - return DNS_VERIFY_ERROR; + return -1; } + if (fingerprints->rri_nrdatas) + *flags |= DNS_VERIFY_FOUND; + for (counter = 0 ; counter < fingerprints->rri_nrdatas ; counter++) { /* * Extract the key from the answer. Ignore any badly @@ -219,35 +219,22 @@ memcmp(hostkey_digest, dnskey_digest, hostkey_digest_len) == 0) { - /* Matching algoritm and digest. */ - freerrset(fingerprints); - debug("matching host key fingerprint found in DNS"); - return DNS_VERIFY_OK; - } else { - /* Correct algorithm but bad digest */ - debug("verify_hostkey_dns: failed"); - failures++; + *flags |= DNS_VERIFY_MATCH; } } } freerrset(fingerprints); - if (failures) { - error("@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@"); - error("@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @"); - error("@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@"); - error("IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!"); - error("Someone could be eavesdropping on you right now (man-in-the-middle attack)!"); - error("It is also possible that the %s host key has just been changed.", - key_type(hostkey)); - error("Please contact your system administrator."); - return DNS_VERIFY_FAILED; - } - - debug("fingerprints found in DNS, but none of them matched"); + if (*flags & DNS_VERIFY_FOUND) + if (*flags & DNS_VERIFY_MATCH) + debug("matching host key fingerprint found in DNS"); + else + debug("mismatching host key fingerprint found in DNS"); + else + debug("no host key fingerprint found in DNS"); - return DNS_VERIFY_ERROR; + return 0; } @@ -255,7 +242,7 @@ * Export the fingerprint of a key as a DNS resource record */ int -export_dns_rr(const char *hostname, Key *key, FILE *f, int generic) +export_dns_rr(const char *hostname, const Key *key, FILE *f, int generic) { u_int8_t rdata_pubkey_algorithm = 0; u_int8_t rdata_digest_type = SSHFP_HASH_SHA1; @@ -286,5 +273,3 @@ return success; } - -#endif /* DNS */ diff -ru --new-file openssh-3.7.1p2/dns.h openssh-3.8p1/dns.h --- openssh-3.7.1p2/dns.h 2003-05-15 10:19:46.000000000 +1000 +++ openssh-3.8p1/dns.h 2003-11-17 21:19:29.000000000 +1100 @@ -1,4 +1,4 @@ -/* $OpenBSD: dns.h,v 1.3 2003/05/14 22:56:51 jakob Exp $ */ +/* $OpenBSD: dns.h,v 1.5 2003/11/12 16:39:58 jakob Exp $ */ /* * Copyright (c) 2003 Wesley Griffin. All rights reserved. @@ -28,7 +28,6 @@ #include "includes.h" -#ifdef DNS #ifndef DNS_H #define DNS_H @@ -46,12 +45,12 @@ #define DNS_RDATACLASS_IN 1 #define DNS_RDATATYPE_SSHFP 44 -#define DNS_VERIFY_FAILED -1 -#define DNS_VERIFY_OK 0 -#define DNS_VERIFY_ERROR 1 +#define DNS_VERIFY_FOUND 0x00000001 +#define DNS_VERIFY_MATCH 0x00000002 +#define DNS_VERIFY_SECURE 0x00000004 -int verify_host_key_dns(const char *, struct sockaddr *, Key *); -int export_dns_rr(const char *, Key *, FILE *, int); + +int verify_host_key_dns(const char *, struct sockaddr *, const Key *, int *); +int export_dns_rr(const char *, const Key *, FILE *, int); #endif /* DNS_H */ -#endif /* DNS */ Binary files openssh-3.7.1p2/dns.o and openssh-3.8p1/dns.o differ diff -ru --new-file openssh-3.7.1p2/entropy.c openssh-3.8p1/entropy.c --- openssh-3.7.1p2/entropy.c 2003-08-25 11:16:21.000000000 +1000 +++ openssh-3.8p1/entropy.c 2003-11-21 23:56:47.000000000 +1100 @@ -36,16 +36,16 @@ /* * Portable OpenSSH PRNG seeding: - * If OpenSSL has not "internally seeded" itself (e.g. pulled data from - * /dev/random), then we execute a "ssh-rand-helper" program which - * collects entropy and writes it to stdout. The child program must + * If OpenSSL has not "internally seeded" itself (e.g. pulled data from + * /dev/random), then we execute a "ssh-rand-helper" program which + * collects entropy and writes it to stdout. The child program must * write at least RANDOM_SEED_SIZE bytes. The child is run with stderr * attached, so error/debugging output should be visible. * * XXX: we should tell the child how many bytes we need. */ -RCSID("$Id: entropy.c,v 1.46 2003/08/25 01:16:21 mouring Exp $"); +RCSID("$Id: entropy.c,v 1.48 2003/11/21 12:56:47 djm Exp $"); #ifndef OPENSSL_PRNG_ONLY #define RANDOM_SEED_SIZE 48 @@ -86,16 +86,16 @@ close(p[1]); close(devnull); - if (original_uid != original_euid && - ( seteuid(getuid()) == -1 || + if (original_uid != original_euid && + ( seteuid(getuid()) == -1 || setuid(original_uid) == -1) ) { - fprintf(stderr, "(rand child) setuid(%li): %s\n", + fprintf(stderr, "(rand child) setuid(%li): %s\n", (long int)original_uid, strerror(errno)); _exit(1); } - + execl(SSH_RAND_HELPER, "ssh-rand-helper", NULL); - fprintf(stderr, "(rand child) Couldn't exec '%s': %s\n", + fprintf(stderr, "(rand child) Couldn't exec '%s': %s\n", SSH_RAND_HELPER, strerror(errno)); _exit(1); } @@ -114,12 +114,12 @@ close(p[0]); if (waitpid(pid, &ret, 0) == -1) - fatal("Couldn't wait for ssh-rand-helper completion: %s", + fatal("Couldn't wait for ssh-rand-helper completion: %s", strerror(errno)); signal(SIGCHLD, old_sigchld); /* We don't mind if the child exits upon a SIGPIPE */ - if (!WIFEXITED(ret) && + if (!WIFEXITED(ret) && (!WIFSIGNALED(ret) || WTERMSIG(ret) != SIGPIPE)) fatal("ssh-rand-helper terminated abnormally"); if (WEXITSTATUS(ret) != 0) @@ -134,7 +134,7 @@ } void -init_rng(void) +init_rng(void) { /* * OpenSSL version numbers: MNNFFPPS: major minor fix patch status Binary files openssh-3.7.1p2/entropy.o and openssh-3.8p1/entropy.o differ diff -ru --new-file openssh-3.7.1p2/fatal.c openssh-3.8p1/fatal.c --- openssh-3.7.1p2/fatal.c 2002-02-27 06:24:22.000000000 +1100 +++ openssh-3.8p1/fatal.c 2003-10-02 16:12:37.000000000 +1000 @@ -23,7 +23,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: fatal.c,v 1.1 2002/02/22 12:20:34 markus Exp $"); +RCSID("$OpenBSD: fatal.c,v 1.2 2003/09/23 20:17:11 markus Exp $"); #include "log.h" @@ -36,5 +36,5 @@ va_start(args, fmt); do_log(SYSLOG_LEVEL_FATAL, fmt, args); va_end(args); - fatal_cleanup(); + cleanup_exit(255); } Binary files openssh-3.7.1p2/fatal.o and openssh-3.8p1/fatal.o differ diff -ru --new-file openssh-3.7.1p2/fixprogs openssh-3.8p1/fixprogs --- openssh-3.7.1p2/fixprogs 2000-09-16 16:10:56.000000000 +1100 +++ openssh-3.8p1/fixprogs 2003-11-21 23:48:55.000000000 +1100 @@ -65,7 +65,7 @@ ($null, $null, $rate) = split(/,/, $ent[0]); $est = $rate / $entscale; # scale the estimate back } - } + } print OUT "\"$cmd\" $path $est\n"; } diff -ru --new-file openssh-3.7.1p2/groupaccess.c openssh-3.8p1/groupaccess.c --- openssh-3.7.1p2/groupaccess.c 2003-05-14 13:40:07.000000000 +1000 +++ openssh-3.8p1/groupaccess.c 2004-02-24 13:05:12.000000000 +1100 @@ -31,7 +31,7 @@ #include "log.h" static int ngroups; -static char *groups_byname[NGROUPS_MAX + 1]; /* +1 for base/primary group */ +static char **groups_byname; /* * Initialize group access list for user with primary (base) and @@ -40,19 +40,27 @@ int ga_init(const char *user, gid_t base) { - gid_t groups_bygid[NGROUPS_MAX + 1]; + gid_t *groups_bygid; int i, j; struct group *gr; if (ngroups > 0) ga_free(); - ngroups = sizeof(groups_bygid) / sizeof(gid_t); + ngroups = NGROUPS_MAX; +#if defined(HAVE_SYSCONF) && defined(_SC_NGROUPS_MAX) + ngroups = MAX(NGROUPS_MAX, sysconf(_SC_NGROUPS_MAX)); +#endif + + groups_bygid = xmalloc(ngroups * sizeof(*groups_bygid)); + groups_byname = xmalloc(ngroups * sizeof(*groups_byname)); + if (getgrouplist(user, base, groups_bygid, &ngroups) == -1) logit("getgrouplist: groups list too small"); for (i = 0, j = 0; i < ngroups; i++) if ((gr = getgrgid(groups_bygid[i])) != NULL) groups_byname[j++] = xstrdup(gr->gr_name); + xfree(groups_bygid); return (ngroups = j); } @@ -84,5 +92,6 @@ for (i = 0; i < ngroups; i++) xfree(groups_byname[i]); ngroups = 0; + xfree(groups_byname); } } Binary files openssh-3.7.1p2/groupaccess.o and openssh-3.8p1/groupaccess.o differ diff -ru --new-file openssh-3.7.1p2/gss-genr.c openssh-3.8p1/gss-genr.c --- openssh-3.7.1p2/gss-genr.c 2003-08-26 11:49:56.000000000 +1000 +++ openssh-3.8p1/gss-genr.c 2003-11-21 23:56:47.000000000 +1100 @@ -1,4 +1,4 @@ -/* $OpenBSD: gss-genr.c,v 1.1 2003/08/22 10:56:09 markus Exp $ */ +/* $OpenBSD: gss-genr.c,v 1.3 2003/11/21 11:57:03 djm Exp $ */ /* * Copyright (c) 2001-2003 Simon Wilkinson. All rights reserved. @@ -33,9 +33,12 @@ #include "compat.h" #include "log.h" #include "monitor_wrap.h" +#include "ssh2.h" #include "ssh-gss.h" +extern u_char *session_id2; +extern u_int session_id2_len; /* Check that the OID in a data stream matches that in the context */ int @@ -245,6 +248,28 @@ } OM_uint32 +ssh_gssapi_sign(Gssctxt *ctx, gss_buffer_t buffer, gss_buffer_t hash) +{ + if ((ctx->major = gss_get_mic(&ctx->minor, ctx->context, + GSS_C_QOP_DEFAULT, buffer, hash))) + ssh_gssapi_error(ctx); + + return (ctx->major); +} + +void +ssh_gssapi_buildmic(Buffer *b, const char *user, const char *service, + const char *context) +{ + buffer_init(b); + buffer_put_string(b, session_id2, session_id2_len); + buffer_put_char(b, SSH2_MSG_USERAUTH_REQUEST); + buffer_put_cstring(b, user); + buffer_put_cstring(b, service); + buffer_put_cstring(b, context); +} + +OM_uint32 ssh_gssapi_server_ctx(Gssctxt **ctx, gss_OID oid) { if (*ctx) ssh_gssapi_delete_ctx(ctx); Binary files openssh-3.7.1p2/gss-genr.o and openssh-3.8p1/gss-genr.o differ diff -ru --new-file openssh-3.7.1p2/gss-serv-krb5.c openssh-3.8p1/gss-serv-krb5.c --- openssh-3.7.1p2/gss-serv-krb5.c 2003-08-26 11:58:16.000000000 +1000 +++ openssh-3.8p1/gss-serv-krb5.c 2004-02-24 10:37:33.000000000 +1100 @@ -1,4 +1,4 @@ -/* $OpenBSD: gss-serv-krb5.c,v 1.1 2003/08/22 10:56:09 markus Exp $ */ +/* $OpenBSD: gss-serv-krb5.c,v 1.2 2003/11/21 11:57:03 djm Exp $ */ /* * Copyright (c) 2001-2003 Simon Wilkinson. All rights reserved. @@ -39,16 +39,20 @@ extern ServerOptions options; #ifdef HEIMDAL -#include +# include #else -#include +# ifdef HAVE_GSSAPI_KRB5 +# include +# elif HAVE_GSSAPI_GSSAPI_KRB5 +# include +# endif #endif static krb5_context krb_context = NULL; /* Initialise the krb5 library, for the stuff that GSSAPI won't do */ -static int +static int ssh_gssapi_krb5_init() { krb5_error_code problem; @@ -108,6 +112,7 @@ krb5_error_code problem; krb5_principal princ; OM_uint32 maj_status, min_status; + int len; if (client->creds == NULL) { debug("No credentials stored"); @@ -127,10 +132,10 @@ { int tmpfd; char ccname[40]; - - snprintf(ccname, sizeof(ccname), + + snprintf(ccname, sizeof(ccname), "FILE:/tmp/krb5cc_%d_XXXXXX", geteuid()); - + if ((tmpfd = mkstemp(ccname + strlen("FILE:"))) == -1) { logit("mkstemp(): %.100s", strerror(errno)); problem = errno; @@ -151,7 +156,7 @@ } #endif /* #ifdef HEIMDAL */ - if ((problem = krb5_parse_name(krb_context, + if ((problem = krb5_parse_name(krb_context, client->exportedname.value, &princ))) { logit("krb5_parse_name(): %.100s", krb5_get_err_text(krb_context, problem)); @@ -169,7 +174,7 @@ krb5_free_principal(krb_context, princ); - if ((maj_status = gss_krb5_copy_ccache(&min_status, + if ((maj_status = gss_krb5_copy_ccache(&min_status, client->creds, ccache))) { logit("gss_krb5_copy_ccache() failed"); krb5_cc_destroy(krb_context, ccache); @@ -178,11 +183,13 @@ client->store.filename = xstrdup(krb5_cc_get_name(krb_context, ccache)); client->store.envvar = "KRB5CCNAME"; - client->store.envval = xstrdup(client->store.filename); + len = strlen(client->store.filename) + 6; + client->store.envval = xmalloc(len); + snprintf(client->store.envval, len, "FILE:%s", client->store.filename); #ifdef USE_PAM if (options.use_pam) - do_pam_putenv(client->store.envvar,client->store.envval); + do_pam_putenv(client->store.envvar, client->store.envval); #endif krb5_cc_close(krb_context, ccache); Binary files openssh-3.7.1p2/gss-serv-krb5.o and openssh-3.8p1/gss-serv-krb5.o differ diff -ru --new-file openssh-3.7.1p2/gss-serv.c openssh-3.8p1/gss-serv.c --- openssh-3.7.1p2/gss-serv.c 2003-09-02 22:56:42.000000000 +1000 +++ openssh-3.8p1/gss-serv.c 2003-11-17 22:18:22.000000000 +1100 @@ -1,4 +1,4 @@ -/* $OpenBSD: gss-serv.c,v 1.3 2003/08/31 13:31:57 markus Exp $ */ +/* $OpenBSD: gss-serv.c,v 1.5 2003/11/17 11:06:07 markus Exp $ */ /* * Copyright (c) 2001-2003 Simon Wilkinson. All rights reserved. @@ -232,9 +232,9 @@ return (ctx->major); } -/* As user - called through fatal cleanup hook */ +/* As user - called on fatal/exit */ void -ssh_gssapi_cleanup_creds(void *ignored) +ssh_gssapi_cleanup_creds(void) { if (gssapi_client.store.filename != NULL) { /* Unlink probably isn't sufficient */ @@ -249,8 +249,6 @@ { if (gssapi_client.mech && gssapi_client.mech->storecreds) { (*gssapi_client.mech->storecreds)(&gssapi_client); - if (options.gss_cleanup_creds) - fatal_add_cleanup(ssh_gssapi_cleanup_creds, NULL); } else debug("ssh_gssapi_storecreds: Not a GSSAPI mechanism"); } @@ -289,4 +287,14 @@ return (0); } +/* Priviledged */ +OM_uint32 +ssh_gssapi_checkmic(Gssctxt *ctx, gss_buffer_t gssbuf, gss_buffer_t gssmic) +{ + ctx->major = gss_verify_mic(&ctx->minor, ctx->context, + gssbuf, gssmic, NULL); + + return (ctx->major); +} + #endif Binary files openssh-3.7.1p2/gss-serv.o and openssh-3.8p1/gss-serv.o differ diff -ru --new-file openssh-3.7.1p2/hostfile.c openssh-3.8p1/hostfile.c --- openssh-3.7.1p2/hostfile.c 2003-05-14 13:40:07.000000000 +1000 +++ openssh-3.8p1/hostfile.c 2003-11-17 21:18:23.000000000 +1100 @@ -36,7 +36,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: hostfile.c,v 1.31 2003/04/08 20:21:28 itojun Exp $"); +RCSID("$OpenBSD: hostfile.c,v 1.32 2003/11/10 16:23:41 jakob Exp $"); #include "packet.h" #include "match.h" @@ -72,7 +72,7 @@ } static int -hostfile_check_key(int bits, Key *key, const char *host, const char *filename, int linenum) +hostfile_check_key(int bits, const Key *key, const char *host, const char *filename, int linenum) { if (key == NULL || key->type != KEY_RSA1 || key->rsa == NULL) return 1; @@ -98,7 +98,7 @@ static HostStatus check_host_in_hostfile_by_key_or_type(const char *filename, - const char *host, Key *key, int keytype, Key *found, int *numret) + const char *host, const Key *key, int keytype, Key *found, int *numret) { FILE *f; char line[8192]; @@ -188,7 +188,7 @@ } HostStatus -check_host_in_hostfile(const char *filename, const char *host, Key *key, +check_host_in_hostfile(const char *filename, const char *host, const Key *key, Key *found, int *numret) { if (key == NULL) @@ -211,7 +211,7 @@ */ int -add_host_to_hostfile(const char *filename, const char *host, Key *key) +add_host_to_hostfile(const char *filename, const char *host, const Key *key) { FILE *f; int success = 0; diff -ru --new-file openssh-3.7.1p2/hostfile.h openssh-3.8p1/hostfile.h --- openssh-3.7.1p2/hostfile.h 2002-12-23 13:06:20.000000000 +1100 +++ openssh-3.8p1/hostfile.h 2003-11-17 21:18:23.000000000 +1100 @@ -1,4 +1,4 @@ -/* $OpenBSD: hostfile.h,v 1.13 2002/11/21 23:03:51 deraadt Exp $ */ +/* $OpenBSD: hostfile.h,v 1.14 2003/11/10 16:23:41 jakob Exp $ */ /* * Author: Tatu Ylonen @@ -20,8 +20,8 @@ int hostfile_read_key(char **, u_int *, Key *); HostStatus check_host_in_hostfile(const char *, const char *, - Key *, Key *, int *); -int add_host_to_hostfile(const char *, const char *, Key *); + const Key *, Key *, int *); +int add_host_to_hostfile(const char *, const char *, const Key *); int lookup_key_in_hostfile_by_type(const char *, const char *, int, Key *, int *); Binary files openssh-3.7.1p2/hostfile.o and openssh-3.8p1/hostfile.o differ diff -ru --new-file openssh-3.7.1p2/includes.h openssh-3.8p1/includes.h --- openssh-3.7.1p2/includes.h 2003-06-29 21:23:37.000000000 +1000 +++ openssh-3.8p1/includes.h 2004-02-06 21:29:42.000000000 +1100 @@ -134,6 +134,12 @@ #ifdef HAVE_SYS_STRTIO_H #include /* for TIOCCBRK on HP-UX */ #endif +#if defined(HAVE_SYS_PTMS_H) && defined(HAVE_DEV_PTMX) +# if defined(HAVE_SYS_STREAM_H) +# include /* reqd for queue_t on Solaris 2.5.1 */ +# endif +#include /* for grantpt() and friends */ +#endif #include /* For typedefs */ #include /* For IPv6 macros */ @@ -147,7 +153,11 @@ # include /* For INADDR_LOOPBACK */ #endif #ifdef USE_PAM +#if defined(HAVE_SECURITY_PAM_APPL_H) # include +#elif defined (HAVE_PAM_PAM_APPL_H) +# include +#endif #endif #ifdef HAVE_READPASSPHRASE_H # include @@ -165,6 +175,11 @@ # include /* Openpty on FreeBSD at least */ #endif +#if defined(KRB5) && defined(USE_AFS) +# include +# include +#endif + #include /* For OPENSSL_VERSION_NUMBER */ #include "defines.h" diff -ru --new-file openssh-3.7.1p2/install-sh openssh-3.8p1/install-sh --- openssh-3.7.1p2/install-sh 1999-11-25 12:31:26.000000000 +1100 +++ openssh-3.8p1/install-sh 2003-11-21 23:48:55.000000000 +1100 @@ -125,7 +125,7 @@ else # Waiting for this to be detected by the "$instcmd $src $dsttmp" command -# might cause directories to be created, which would be especially bad +# might cause directories to be created, which would be especially bad # if $src (and thus $dsttmp) contains '*'. if [ -f $src -o -d $src ] @@ -180,7 +180,7 @@ shift if [ ! -d "${pathcomp}" ] ; - then + then $mkdirprog "${pathcomp}" else true @@ -202,17 +202,17 @@ # If we're going to rename the final executable, determine the name now. - if [ x"$transformarg" = x ] + if [ x"$transformarg" = x ] then dstfile=`basename $dst` else - dstfile=`basename $dst $transformbasename | + dstfile=`basename $dst $transformbasename | sed $transformarg`$transformbasename fi # don't allow the sed command to completely eliminate the filename - if [ x"$dstfile" = x ] + if [ x"$dstfile" = x ] then dstfile=`basename $dst` else @@ -243,7 +243,7 @@ # Now rename the file to the real destination. $doit $rmcmd -f $dstdir/$dstfile && - $doit $mvcmd $dsttmp $dstdir/$dstfile + $doit $mvcmd $dsttmp $dstdir/$dstfile fi && diff -ru --new-file openssh-3.7.1p2/kex.c openssh-3.8p1/kex.c --- openssh-3.7.1p2/kex.c 2003-04-01 21:44:37.000000000 +1000 +++ openssh-3.8p1/kex.c 2003-11-21 23:48:55.000000000 +1100 @@ -23,7 +23,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: kex.c,v 1.55 2003/04/01 10:31:26 markus Exp $"); +RCSID("$OpenBSD: kex.c,v 1.56 2003/11/21 11:57:03 djm Exp $"); #include @@ -310,7 +310,7 @@ xfree(hostkeyalg); } -static int +static int proposals_match(char *my[PROPOSAL_MAX], char *peer[PROPOSAL_MAX]) { static int check[] = { @@ -392,7 +392,7 @@ kex->we_need = need; /* ignore the next message if the proposals do not match */ - if (first_kex_follows && !proposals_match(my, peer) && + if (first_kex_follows && !proposals_match(my, peer) && !(datafellows & SSH_BUG_FIRSTKEX)) { type = packet_read(); debug2("skipping next packet (type %u)", type); Binary files openssh-3.7.1p2/kex.o and openssh-3.8p1/kex.o differ Binary files openssh-3.7.1p2/kexdh.o and openssh-3.8p1/kexdh.o differ Binary files openssh-3.7.1p2/kexdhc.o and openssh-3.8p1/kexdhc.o differ Binary files openssh-3.7.1p2/kexdhs.o and openssh-3.8p1/kexdhs.o differ Binary files openssh-3.7.1p2/kexgex.o and openssh-3.8p1/kexgex.o differ diff -ru --new-file openssh-3.7.1p2/kexgexc.c openssh-3.8p1/kexgexc.c --- openssh-3.7.1p2/kexgexc.c 2003-02-24 12:06:32.000000000 +1100 +++ openssh-3.8p1/kexgexc.c 2003-12-09 19:18:07.000000000 +1100 @@ -24,7 +24,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: kexgexc.c,v 1.1 2003/02/16 17:09:57 markus Exp $"); +RCSID("$OpenBSD: kexgexc.c,v 1.2 2003/12/08 11:00:47 markus Exp $"); #include "xmalloc.h" #include "key.h" @@ -49,16 +49,14 @@ nbits = dh_estimate(kex->we_need * 8); if (datafellows & SSH_OLD_DHGEX) { - debug("SSH2_MSG_KEX_DH_GEX_REQUEST_OLD sent"); - /* Old GEX request */ packet_start(SSH2_MSG_KEX_DH_GEX_REQUEST_OLD); packet_put_int(nbits); min = DH_GRP_MIN; max = DH_GRP_MAX; - } else { - debug("SSH2_MSG_KEX_DH_GEX_REQUEST sent"); + debug("SSH2_MSG_KEX_DH_GEX_REQUEST_OLD(%u) sent", nbits); + } else { /* New GEX request */ min = DH_GRP_MIN; max = DH_GRP_MAX; @@ -66,6 +64,9 @@ packet_put_int(min); packet_put_int(nbits); packet_put_int(max); + + debug("SSH2_MSG_KEX_DH_GEX_REQUEST(%u<%u<%u) sent", + min, nbits, max); } #ifdef DEBUG_KEXDH fprintf(stderr, "\nmin = %d, nbits = %d, max = %d\n", Binary files openssh-3.7.1p2/kexgexc.o and openssh-3.8p1/kexgexc.o differ Binary files openssh-3.7.1p2/kexgexs.o and openssh-3.8p1/kexgexs.o differ diff -ru --new-file openssh-3.7.1p2/key.c openssh-3.8p1/key.c --- openssh-3.7.1p2/key.c 2003-07-14 17:28:34.000000000 +1000 +++ openssh-3.8p1/key.c 2003-11-17 21:18:23.000000000 +1100 @@ -32,7 +32,7 @@ * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. */ #include "includes.h" -RCSID("$OpenBSD: key.c,v 1.54 2003/07/09 13:58:19 avsm Exp $"); +RCSID("$OpenBSD: key.c,v 1.55 2003/11/10 16:23:41 jakob Exp $"); #include @@ -143,8 +143,9 @@ } xfree(k); } + int -key_equal(Key *a, Key *b) +key_equal(const Key *a, const Key *b) { if (a == NULL || b == NULL || a->type != b->type) return 0; @@ -170,7 +171,8 @@ } u_char* -key_fingerprint_raw(Key *k, enum fp_type dgst_type, u_int *dgst_raw_length) +key_fingerprint_raw(const Key *k, enum fp_type dgst_type, + u_int *dgst_raw_length) { const EVP_MD *md = NULL; EVP_MD_CTX ctx; @@ -292,7 +294,7 @@ } char * -key_fingerprint(Key *k, enum fp_type dgst_type, enum fp_rep dgst_rep) +key_fingerprint(const Key *k, enum fp_type dgst_type, enum fp_rep dgst_rep) { char *retval = NULL; u_char *dgst_raw; @@ -490,7 +492,7 @@ } int -key_write(Key *key, FILE *f) +key_write(const Key *key, FILE *f) { int n, success = 0; u_int len, bits = 0; @@ -522,8 +524,8 @@ return success; } -char * -key_type(Key *k) +const char * +key_type(const Key *k) { switch (k->type) { case KEY_RSA1: @@ -539,8 +541,8 @@ return "unknown"; } -char * -key_ssh_name(Key *k) +const char * +key_ssh_name(const Key *k) { switch (k->type) { case KEY_RSA: @@ -554,7 +556,7 @@ } u_int -key_size(Key *k) +key_size(const Key *k) { switch (k->type) { case KEY_RSA1: @@ -611,7 +613,7 @@ } Key * -key_from_private(Key *k) +key_from_private(const Key *k) { Key *n = NULL; switch (k->type) { @@ -676,7 +678,7 @@ } Key * -key_from_blob(u_char *blob, u_int blen) +key_from_blob(const u_char *blob, u_int blen) { Buffer b; char *ktype; @@ -726,7 +728,7 @@ } int -key_to_blob(Key *key, u_char **blobp, u_int *lenp) +key_to_blob(const Key *key, u_char **blobp, u_int *lenp) { Buffer b; int len; @@ -768,9 +770,9 @@ int key_sign( - Key *key, + const Key *key, u_char **sigp, u_int *lenp, - u_char *data, u_int datalen) + const u_char *data, u_int datalen) { switch (key->type) { case KEY_DSA: @@ -792,9 +794,9 @@ */ int key_verify( - Key *key, - u_char *signature, u_int signaturelen, - u_char *data, u_int datalen) + const Key *key, + const u_char *signature, u_int signaturelen, + const u_char *data, u_int datalen) { if (signaturelen == 0) return -1; @@ -815,7 +817,7 @@ /* Converts a private to a public key */ Key * -key_demote(Key *k) +key_demote(const Key *k) { Key *pk; diff -ru --new-file openssh-3.7.1p2/key.h openssh-3.8p1/key.h --- openssh-3.7.1p2/key.h 2003-06-28 12:38:02.000000000 +1000 +++ openssh-3.8p1/key.h 2003-11-17 21:18:23.000000000 +1100 @@ -1,4 +1,4 @@ -/* $OpenBSD: key.h,v 1.22 2003/06/24 08:23:46 markus Exp $ */ +/* $OpenBSD: key.h,v 1.23 2003/11/10 16:23:41 jakob Exp $ */ /* * Copyright (c) 2000, 2001 Markus Friedl. All rights reserved. @@ -55,33 +55,33 @@ DSA *dsa; }; -Key *key_new(int); -Key *key_new_private(int); -void key_free(Key *); -Key *key_demote(Key *); -int key_equal(Key *, Key *); -char *key_fingerprint(Key *, enum fp_type, enum fp_rep); -u_char *key_fingerprint_raw(Key *, enum fp_type, u_int *); -char *key_type(Key *); -int key_write(Key *, FILE *); -int key_read(Key *, char **); -u_int key_size(Key *); +Key *key_new(int); +Key *key_new_private(int); +void key_free(Key *); +Key *key_demote(const Key *); +int key_equal(const Key *, const Key *); +char *key_fingerprint(const Key *, enum fp_type, enum fp_rep); +u_char *key_fingerprint_raw(const Key *, enum fp_type, u_int *); +const char *key_type(const Key *); +int key_write(const Key *, FILE *); +int key_read(Key *, char **); +u_int key_size(const Key *); Key *key_generate(int, u_int); -Key *key_from_private(Key *); +Key *key_from_private(const Key *); int key_type_from_name(char *); -Key *key_from_blob(u_char *, u_int); -int key_to_blob(Key *, u_char **, u_int *); -char *key_ssh_name(Key *); -int key_names_valid2(const char *); - -int key_sign(Key *, u_char **, u_int *, u_char *, u_int); -int key_verify(Key *, u_char *, u_int, u_char *, u_int); - -int ssh_dss_sign(Key *, u_char **, u_int *, u_char *, u_int); -int ssh_dss_verify(Key *, u_char *, u_int, u_char *, u_int); -int ssh_rsa_sign(Key *, u_char **, u_int *, u_char *, u_int); -int ssh_rsa_verify(Key *, u_char *, u_int, u_char *, u_int); +Key *key_from_blob(const u_char *, u_int); +int key_to_blob(const Key *, u_char **, u_int *); +const char *key_ssh_name(const Key *); +int key_names_valid2(const char *); + +int key_sign(const Key *, u_char **, u_int *, const u_char *, u_int); +int key_verify(const Key *, const u_char *, u_int, const u_char *, u_int); + +int ssh_dss_sign(const Key *, u_char **, u_int *, const u_char *, u_int); +int ssh_dss_verify(const Key *, const u_char *, u_int, const u_char *, u_int); +int ssh_rsa_sign(const Key *, u_char **, u_int *, const u_char *, u_int); +int ssh_rsa_verify(const Key *, const u_char *, u_int, const u_char *, u_int); #endif Binary files openssh-3.7.1p2/key.o and openssh-3.8p1/key.o differ Binary files openssh-3.7.1p2/libssh.a and openssh-3.8p1/libssh.a differ diff -ru --new-file openssh-3.7.1p2/log.c openssh-3.8p1/log.c --- openssh-3.7.1p2/log.c 2003-09-23 19:24:21.000000000 +1000 +++ openssh-3.8p1/log.c 2004-02-18 22:59:43.000000000 +1100 @@ -34,7 +34,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: log.c,v 1.28 2003/05/24 09:02:22 djm Exp $"); +RCSID("$OpenBSD: log.c,v 1.29 2003/09/23 20:17:11 markus Exp $"); #include "log.h" #include "xmalloc.h" @@ -183,83 +183,6 @@ va_end(args); } -/* Fatal cleanup */ - -struct fatal_cleanup { - struct fatal_cleanup *next; - void (*proc) (void *); - void *context; -}; - -static struct fatal_cleanup *fatal_cleanups = NULL; - -/* Registers a cleanup function to be called by fatal() before exiting. */ - -void -fatal_add_cleanup(void (*proc) (void *), void *context) -{ - struct fatal_cleanup *cu; - - cu = xmalloc(sizeof(*cu)); - cu->proc = proc; - cu->context = context; - cu->next = fatal_cleanups; - fatal_cleanups = cu; -} - -/* Removes a cleanup frunction to be called at fatal(). */ - -void -fatal_remove_cleanup(void (*proc) (void *context), void *context) -{ - struct fatal_cleanup **cup, *cu; - - for (cup = &fatal_cleanups; *cup; cup = &cu->next) { - cu = *cup; - if (cu->proc == proc && cu->context == context) { - *cup = cu->next; - xfree(cu); - return; - } - } - fatal("fatal_remove_cleanup: no such cleanup function: 0x%lx 0x%lx", - (u_long) proc, (u_long) context); -} - -/* Remove all cleanups, to be called after fork() */ -void -fatal_remove_all_cleanups(void) -{ - struct fatal_cleanup *cu, *next_cu; - - for (cu = fatal_cleanups; cu; cu = next_cu) { - next_cu = cu->next; - xfree(cu); - } - fatal_cleanups = NULL; -} - -/* Cleanup and exit */ -void -fatal_cleanup(void) -{ - struct fatal_cleanup *cu, *next_cu; - static int called = 0; - - if (called) - exit(255); - called = 1; - /* Call cleanup functions. */ - for (cu = fatal_cleanups; cu; cu = next_cu) { - next_cu = cu->next; - debug("Calling cleanup 0x%lx(0x%lx)", - (u_long) cu->proc, (u_long) cu->context); - (*cu->proc) (cu->context); - } - exit(255); -} - - /* * Initialize the log. */ @@ -342,7 +265,7 @@ void do_log(LogLevel level, const char *fmt, va_list args) { -#ifdef OPENLOG_R +#if defined(HAVE_OPENLOG_R) && defined(SYSLOG_DATA_INIT) struct syslog_data sdata = SYSLOG_DATA_INIT; #endif char msgbuf[MSGBUFSIZ]; @@ -398,7 +321,7 @@ snprintf(msgbuf, sizeof msgbuf, "%s\r\n", fmtbuf); write(STDERR_FILENO, msgbuf, strlen(msgbuf)); } else { -#ifdef OPENLOG_R +#if defined(HAVE_OPENLOG_R) && defined(SYSLOG_DATA_INIT) openlog_r(argv0 ? argv0 : __progname, LOG_PID, log_facility, &sdata); syslog_r(pri, &sdata, "%.500s", fmtbuf); closelog_r(&sdata); diff -ru --new-file openssh-3.7.1p2/log.h openssh-3.8p1/log.h --- openssh-3.7.1p2/log.h 2003-05-14 13:40:07.000000000 +1000 +++ openssh-3.8p1/log.h 2003-10-02 16:12:37.000000000 +1000 @@ -1,4 +1,4 @@ -/* $OpenBSD: log.h,v 1.9 2003/04/08 20:21:28 itojun Exp $ */ +/* $OpenBSD: log.h,v 1.10 2003/09/23 20:17:11 markus Exp $ */ /* * Author: Tatu Ylonen @@ -61,11 +61,6 @@ void debug2(const char *, ...) __attribute__((format(printf, 1, 2))); void debug3(const char *, ...) __attribute__((format(printf, 1, 2))); -void fatal_cleanup(void); -void fatal_add_cleanup(void (*) (void *), void *); -void fatal_remove_cleanup(void (*) (void *), void *); -void fatal_remove_all_cleanups(void); - void do_log(LogLevel, const char *, va_list); - +void cleanup_exit(int); #endif Binary files openssh-3.7.1p2/log.o and openssh-3.8p1/log.o differ diff -ru --new-file openssh-3.7.1p2/loginrec.c openssh-3.8p1/loginrec.c --- openssh-3.7.1p2/loginrec.c 2003-07-06 15:20:46.000000000 +1000 +++ openssh-3.8p1/loginrec.c 2004-02-10 16:49:35.000000000 +1100 @@ -158,7 +158,7 @@ #include "log.h" #include "atomicio.h" -RCSID("$Id: loginrec.c,v 1.52 2003/07/06 05:20:46 dtucker Exp $"); +RCSID("$Id: loginrec.c,v 1.54 2004/02/10 05:49:35 dtucker Exp $"); #ifdef HAVE_UTIL_H # include @@ -442,7 +442,7 @@ int login_utmp_only(struct logininfo *li) { - li->type = LTYPE_LOGIN; + li->type = LTYPE_LOGIN; login_set_current_time(li); # ifdef USE_UTMP utmp_write_entry(li); @@ -1183,6 +1183,7 @@ static int wtmpx_write(struct logininfo *li, struct utmpx *utx) { +#ifndef HAVE_UPDWTMPX struct stat buf; int fd, ret = 1; @@ -1202,6 +1203,10 @@ (void)close(fd); return ret; +#else + updwtmpx(WTMPX_FILE, utx); + return 1; +#endif } @@ -1534,7 +1539,7 @@ lastlog_populate_entry(li, &last); return (1); case -1: - error("%s: Error reading from %s: %s", __func__, + error("%s: Error reading from %s: %s", __func__, LASTLOG_FILE, strerror(errno)); return (0); default: Binary files openssh-3.7.1p2/loginrec.o and openssh-3.8p1/loginrec.o differ diff -ru --new-file openssh-3.7.1p2/mac.c openssh-3.8p1/mac.c --- openssh-3.7.1p2/mac.c 2002-06-07 05:48:16.000000000 +1000 +++ openssh-3.8p1/mac.c 2003-09-22 21:05:51.000000000 +1000 @@ -23,7 +23,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: mac.c,v 1.5 2002/05/16 22:02:50 markus Exp $"); +RCSID("$OpenBSD: mac.c,v 1.6 2003/09/18 13:02:21 miod Exp $"); #include @@ -77,7 +77,7 @@ if (mac->key == NULL) fatal("mac_compute: no key"); - if (mac->mac_len > sizeof(m)) + if ((u_int)mac->mac_len > sizeof(m)) fatal("mac_compute: mac too long"); HMAC_Init(&c, mac->key, mac->key_len, mac->md); PUT_32BIT(b, seqno); Binary files openssh-3.7.1p2/mac.o and openssh-3.8p1/mac.o differ Binary files openssh-3.7.1p2/match.o and openssh-3.8p1/match.o differ diff -ru --new-file openssh-3.7.1p2/md5crypt.c openssh-3.8p1/md5crypt.c --- openssh-3.7.1p2/md5crypt.c 2003-05-30 16:58:23.000000000 +1000 +++ openssh-3.8p1/md5crypt.c 2003-11-21 23:56:47.000000000 +1100 @@ -1,9 +1,9 @@ /* * ---------------------------------------------------------------------------- * "THE BEER-WARE LICENSE" (Revision 42): - * wrote this file. As long as you retain this - * notice you can do whatever you want with this stuff. If we meet some - * day, and you think this stuff is worth it, you can buy me a beer in + * wrote this file. As long as you retain this + * notice you can do whatever you want with this stuff. If we meet some + * day, and you think this stuff is worth it, you can buy me a beer in * return. Poul-Henning Kamp * ---------------------------------------------------------------------------- */ @@ -13,7 +13,7 @@ #if defined(HAVE_MD5_PASSWORDS) && !defined(HAVE_MD5_CRYPT) #include -RCSID("$Id: md5crypt.c,v 1.7 2003/05/30 06:58:23 dtucker Exp $"); +RCSID("$Id: md5crypt.c,v 1.9 2003/11/21 12:56:47 djm Exp $"); /* 0 ... 63 => ascii - 64 */ static unsigned char itoa64[] = @@ -35,7 +35,7 @@ *s++ = itoa64[v&0x3f]; v >>= 6; } - + return (buf); } Binary files openssh-3.7.1p2/md5crypt.o and openssh-3.8p1/md5crypt.o differ diff -ru --new-file openssh-3.7.1p2/mdoc2man.awk openssh-3.8p1/mdoc2man.awk --- openssh-3.7.1p2/mdoc2man.awk 2003-09-07 12:34:54.000000000 +1000 +++ openssh-3.8p1/mdoc2man.awk 2003-11-21 23:48:55.000000000 +1100 @@ -76,19 +76,19 @@ skip=1 ext=1 if(length(line)&&!(match(line," $")||prenl)) - add(OFS) + add(OFS) } else if(match(words[w],"^Xc$")) { skip=1 ext=0 if(!extopt) - prenl++ + prenl++ w=nwords } else if(match(words[w],"^Bd$")) { skip=1 if(match(words[w+1],"-literal")) { - literal=1 - prenl++ - w=nwords + literal=1 + prenl++ + w=nwords } } else if(match(words[w],"^Ed$")) { skip=1 @@ -96,7 +96,7 @@ } else if(match(words[w],"^Ns$")) { skip=1 if(!nospace) - nospace=1 + nospace=1 sub(" $","",line) } else if(match(words[w],"^No$")) { skip=1 @@ -107,20 +107,20 @@ add("``") add(words[++w]) while(w0;i--) { - add(refauthors[i]) - if(i>1) - add(", ") + add(refauthors[i]) + if(i>1) + add(", ") } if(nrefauthors>1) - add(" and ") + add(" and ") add(refauthors[0] ", \\fI" reftitle "\\fP") if(length(refissue)) - add(", " refissue) + add(", " refissue) if(length(refdate)) - add(", " refdate) + add(", " refdate) if(length(refopt)) - add(", " refopt) + add(", " refopt) add(".") reference=0 } else if(reference) { if(match(words[w],"^%A$")) { refauthors[nrefauthors++]=wtail() } if(match(words[w],"^%T$")) { - reftitle=wtail() - sub("^\"","",reftitle) - sub("\"$","",reftitle) + reftitle=wtail() + sub("^\"","",reftitle) + sub("\"$","",reftitle) } if(match(words[w],"^%N$")) { refissue=wtail() } if(match(words[w],"^%D$")) { refdate=wtail() } if(match(words[w],"^%O$")) { refopt=wtail() } } else if(match(words[w],"^Nm$")) { if(synopsis) { - add(".br") - prenl++ + add(".br") + prenl++ } n=words[++w] if(!length(name)) - name=n + name=n if(!length(n)) - n=name + n=name add("\\fB" n "\\fP") if(!nospace&&match(words[w+1],"^[\\.,]")) - nospace=1 + nospace=1 } else if(match(words[w],"^Nd$")) { add("\\- " wtail()) } else if(match(words[w],"^Fl$")) { add("\\fB\\-" words[++w] "\\fP") if(!nospace&&match(words[w+1],"^[\\.,]")) - nospace=1 + nospace=1 } else if(match(words[w],"^Ar$")) { add("\\fI") if(w==nwords) - add("file ...\\fP") + add("file ...\\fP") else { - add(words[++w] "\\fP") - while(match(words[w+1],"^\\|$")) - add(OFS words[++w] " \\fI" words[++w] "\\fP") + add(words[++w] "\\fP") + while(match(words[w+1],"^\\|$")) + add(OFS words[++w] " \\fI" words[++w] "\\fP") } if(!nospace&&match(words[w+1],"^[\\.,]")) - nospace=1 + nospace=1 } else if(match(words[w],"^Cm$")) { add("\\fB" words[++w] "\\fP") while(w