1 dnl Process this file with autoconf to produce a configure script.
2 AC_INIT([Linux-PAM], [1.1.8], , [Linux-PAM])
3 AC_CONFIG_SRCDIR([conf/pam_conv1/pam_conv_y.y])
4 AC_CONFIG_AUX_DIR([build-aux])
5 AM_INIT_AUTOMAKE([-Wall -Wno-portability])
7 AC_CONFIG_HEADERS([config.h])
8 AC_CONFIG_MACRO_DIR([m4])
15 dnl By default, everything under PAM is installed below /usr.
17 AC_PREFIX_DEFAULT(/usr)
19 dnl and some hacks to use /etc and /lib
20 test "${prefix}" = "NONE" && prefix="/usr"
21 if test ${prefix} = '/usr'
23 dnl If we use /usr as prefix, use /etc for config files
24 if test ${sysconfdir} = '${prefix}/etc'
28 if test ${libdir} = '${exec_prefix}/lib'
31 x86_64|ppc64|s390x|sparc64)
37 if test ${sbindir} = '${exec_prefix}/sbin'
41 dnl If we use /usr as prefix, use /usr/share/man for manual pages
42 if test ${mandir} = '${prefix}/man'
44 mandir='${prefix}/share/man'
46 dnl Add security to include directory
47 if test ${includedir} = '${prefix}/include'
49 includedir="${prefix}/include/security"
52 dnl Add /var directory
53 if test ${localstatedir} = '${prefix}/var'
60 dnl This should be called before any macros that run the C compiler.
61 AC_USE_SYSTEM_EXTENSIONS
63 LT_INIT([disable-static])
66 dnl check if we should link everything static into libpam
68 AC_ARG_ENABLE(static-modules,AS_HELP_STRING([--enable-static-modules],
69 [do not make the modules dynamically loadable]),
70 STATIC_MODULES=$enableval,STATIC_MODULES=no)
71 if test "$STATIC_MODULES" != "no" ; then
72 CFLAGS="$CFLAGS -DPAM_STATIC"
73 AC_ENABLE_STATIC([yes])
74 AC_ENABLE_SHARED([no])
76 # per default don't build static libraries
77 AC_ENABLE_STATIC([no])
78 AC_ENABLE_SHARED([yes])
80 AM_CONDITIONAL([STATIC_MODULES], [test "$STATIC_MODULES" != "no"])
82 dnl Checks for programs.
97 dnl icc claims to be GCC compatible, but use other flags for warnings
98 if eval "test x$GCC = xyes -a $CC != icc"; then
102 -Wbad-function-cast \
105 -Wmissing-declarations \
106 -Wmissing-prototypes \
109 -Wstrict-prototypes \
114 JAPHAR_GREP_CFLAGS($flag, [ CFLAGS="$CFLAGS $flag" ])
117 dnl icc has special warning flags
118 if eval "test x$CC = xicc"; then
121 -Wmissing-prototypes \
124 -Wstrict-prototypes \
132 JAPHAR_GREP_CFLAGS($flag, [ CFLAGS="$CFLAGS $flag" ])
136 if test "x${CC_FOR_BUILD+set}" != "xset" ; then
137 if test "x$cross_compiling" = "xyes" ; then
138 AC_CHECK_PROGS(CC_FOR_BUILD, gcc cc)
143 AC_MSG_CHECKING([for CC_FOR_BUILD])
144 AC_MSG_RESULT([$CC_FOR_BUILD])
145 AC_SUBST(CC_FOR_BUILD)
147 if test "x${BUILD_CPPFLAGS+set}" != "xset" ; then
148 if test "x$cross_compiling" = "xyes" ; then
151 BUILD_CPPFLAGS=${CPPFLAGS}
154 AC_SUBST(BUILD_CPPFLAGS)
156 if test "x${BUILD_CFLAGS+set}" != "xset" ; then
157 if test "x$cross_compiling" = "xyes" ; then
160 BUILD_CFLAGS=${CFLAGS}
163 AC_SUBST(BUILD_CFLAGS)
165 if test "x${BUILD_LDFLAGS+set}" != "xset" ; then
166 if test "x$cross_compiling" = "xyes" ; then
169 BUILD_LDFLAGS=${LDFLAGS}
172 AC_SUBST(BUILD_LDFLAGS)
177 dnl Check if --version-script is supported by ld
179 AC_CACHE_CHECK(for .symver assembler directive, libc_cv_asm_symver_directive,
180 [cat > conftest.s <<EOF
183 .symver _sym,sym@VERS
185 if ${CC-cc} -c $ASFLAGS conftest.s 1>&AS_MESSAGE_LOG_FD 2>&AS_MESSAGE_LOG_FD; then
186 libc_cv_asm_symver_directive=yes
188 libc_cv_asm_symver_directive=no
191 AC_CACHE_CHECK(for ld --version-script, libc_cv_ld_version_script_option, [dnl
192 if test $libc_cv_asm_symver_directive = yes; then
193 cat > conftest.s <<EOF
196 .symver _sym,sym@VERS
198 cat > conftest.map <<EOF
207 if ${CC-cc} -c $ASFLAGS conftest.s 1>&AS_MESSAGE_LOG_FD 2>&AS_MESSAGE_LOG_FD;
209 if AC_TRY_COMMAND([${CC-cc} $CFLAGS $LDFLAGS -shared
210 -o conftest.so conftest.o
211 -nostartfiles -nostdlib
212 -Wl,--version-script,conftest.map
213 1>&AS_MESSAGE_LOG_FD]);
215 libc_cv_ld_version_script_option=yes
217 libc_cv_ld_version_script_option=no
220 libc_cv_ld_version_script_option=no
223 libc_cv_ld_version_script_option=no
226 AM_CONDITIONAL([HAVE_VERSIONING],
227 [test "$libc_cv_ld_version_script_option" = "yes"])
230 dnl check for -fPIE/-pie support
232 dnl icc handles -fpie as -fp without error, so blacklist icc
234 AC_ARG_ENABLE(pie,AS_HELP_STRING([--disable-pie],
235 [disable position-independent executeables (PIE)]),
236 USE_PIE=$enableval, USE_PIE=yes)
238 AC_CACHE_CHECK(for -fpie, libc_cv_fpie, [dnl
239 cat > conftest.c <<EOF
243 if test "$USE_PIE" = "yes" -a "$CC" != "icc" &&
244 AC_TRY_COMMAND([${CC-cc} $CFLAGS $CPPFLAGS $LDFLAGS -pie -fpie
245 -o conftest conftest.c 1>&AS_MESSAGE_LOG_FD])
256 AC_SUBST(libc_cv_fpie)
258 AC_SUBST(PIE_LDFLAGS)
262 dnl options and defaults
265 AC_ARG_ENABLE([prelude],
266 AS_HELP_STRING([--disable-prelude],[do not use prelude]),
267 WITH_PRELUDE=$enableval, WITH_PRELUDE=yes)
268 if test "$WITH_PRELUDE" == "yes" ; then
269 AM_PATH_LIBPRELUDE([0.9.0])
270 if test "$LIBPRELUDE_CONFIG" != "no" ; then
271 LIBPRELUDE_CFLAGS="$LIBPRELUDE_CFLAGS -DPRELUDE=1"
275 dnl lots of debugging information goes to /var/run/pam-debug.log
276 AC_ARG_ENABLE([debug],
277 AS_HELP_STRING([--enable-debug],[specify you are building with debugging on]))
279 if test x"$enable_debug" = x"yes" ; then
280 AC_DEFINE([PAM_DEBUG],,
281 [lots of stuff gets written to /var/run/pam-debug.log])
284 AC_ARG_ENABLE(securedir,
285 AS_HELP_STRING([--enable-securedir=DIR],[path to location of PAMs @<:@default=$libdir/security@:>@]),
286 SECUREDIR=$enableval, SECUREDIR=$libdir/security)
289 AC_ARG_ENABLE([isadir],
290 AS_HELP_STRING([--enable-isadir=DIR],[path to arch-specific module files @<:@default=../../(basename of $libdir)/security@:>@]),
292 ISA=../../`basename $libdir`/security)
294 AC_DEFINE_UNQUOTED(_PAM_ISA,"$ISA",[Define to the path, relative to SECUREDIR, where PAMs specific to this architecture can be found.])
295 AC_MSG_RESULT([Defining \$ISA to "$ISA"])
297 AC_ARG_ENABLE(sconfigdir,
298 AS_HELP_STRING([--enable-sconfigdir=DIR],[path to module conf files @<:@default=$sysconfdir/security@:>@]),
299 SCONFIGDIR=$enableval, SCONFIGDIR=$sysconfdir/security)
302 AC_ARG_ENABLE(pamlocking,
303 AS_HELP_STRING([--enable-pamlocking],[configure libpam to observe a global authentication lock]))
305 if test x"$enable_pamlocking" = "xyes"; then
306 AC_DEFINE([PAM_LOCKING],,
307 [libpam should observe a global authentication lock])
310 AC_ARG_ENABLE(read-both-confs,
311 AS_HELP_STRING([--enable-read-both-confs],[read both /etc/pam.d and /etc/pam.conf files]))
313 if test x"$enable_read_both_confs" = "xyes"; then
314 AC_DEFINE([PAM_READ_BOTH_CONFS],,
315 [read both /etc/pam.d and /etc/pam.conf files])
318 AC_ARG_ENABLE([lckpwdf],
319 AS_HELP_STRING([--disable-lckpwdf],[do not use the lckpwdf function]),
320 WITH_LCKPWDF=$enableval, WITH_LCKPWDF=yes)
321 if test "$WITH_LCKPWDF" == "yes" ; then
322 AC_DEFINE([USE_LCKPWDF], 1,
323 [Define to 1 if the lckpwdf function should be used])
326 AC_CHECK_HEADERS(paths.h)
327 AC_ARG_WITH(mailspool,
328 [ --with-mailspool path to mail spool directory
329 [default _PATH_MAILDIR if defined in paths.h, otherwise /var/spool/mail]],
330 with_mailspool=${withval})
331 if test x$with_mailspool != x ; then
332 pam_mail_spool="\"$with_mailspool\""
334 AC_RUN_IFELSE([AC_LANG_SOURCE([[
342 }]])],[pam_mail_spool="_PATH_MAILDIR"],[pam_mail_spool="\"/var/spool/mail\""],[pam_mail_spool="\"/var/spool/mail\""])
344 AC_DEFINE_UNQUOTED(PAM_PATH_MAILDIR, $pam_mail_spool,
345 [Path where mails are stored])
348 [ --with-xauth additional path to check for xauth when it is called from pam_xauth
349 [added to the default of /usr/X11R6/bin/xauth, /usr/bin/xauth, /usr/bin/X11/xauth]],
350 pam_xauth_path=${withval})
351 if test x$with_xauth == x ; then
352 AC_PATH_PROG(pam_xauth_path, xauth)
353 dnl There is no sense in adding the first default path
354 if test x$pam_xauth_path == x/usr/X11R6/bin/xauth ; then
359 if test x$pam_xauth_path != x ; then
360 AC_DEFINE_UNQUOTED(PAM_PATH_XAUTH, "$pam_xauth_path",
361 [Additional path of xauth executable])
364 dnl Checks for the existence of libdl - on BSD and Tru64 its part of libc
365 AC_CHECK_LIB([dl], [dlopen], LIBDL="-ldl", LIBDL="")
369 AC_ARG_ENABLE([cracklib],
370 AS_HELP_STRING([--disable-cracklib],[do not use cracklib]),
371 WITH_CRACKLIB=$enableval, WITH_CRACKLIB=yes)
372 if test x"$WITH_CRACKLIB" != xno ; then
373 AC_CHECK_HEADERS([crack.h],
374 AC_CHECK_LIB([crack], [FascistCheck], LIBCRACK="-lcrack", LIBCRACK=""))
378 if test -n "$LIBCRACK"; then
379 AC_DEFINE([HAVE_LIBCRACK], [1], [Define to 1 if you have cracklib.])
382 AM_CONDITIONAL([HAVE_LIBCRACK], [test -n "$LIBCRACK"])
384 dnl Look for Linux Auditing library - see documentation
385 AC_ARG_ENABLE([audit],
386 AS_HELP_STRING([--disable-audit],[do not enable audit support]),
387 WITH_LIBAUDIT=$enableval, WITH_LIBAUDIT=yes)
388 if test x"$WITH_LIBAUDIT" != xno ; then
389 AC_CHECK_HEADER([libaudit.h],
390 [AC_CHECK_LIB(audit, audit_log_acct_message, LIBAUDIT=-laudit, LIBAUDIT="")
391 AC_CHECK_TYPE([struct audit_tty_status],
392 [HAVE_AUDIT_TTY_STATUS=yes],
393 [HAVE_AUDIT_TTY_STATUS=""],
394 [#include <libaudit.h>])]
396 if test ! -z "$LIBAUDIT" -a "$ac_cv_header_libaudit_h" != "no" ; then
397 AC_DEFINE([HAVE_LIBAUDIT], 1, [Define to 1 if audit support should be compiled in.])
399 if test ! -z "$HAVE_AUDIT_TTY_STATUS" ; then
400 AC_DEFINE([HAVE_AUDIT_TTY_STATUS], 1, [Define to 1 if struct audit_tty_status exists.])
402 AC_CHECK_MEMBERS([struct audit_tty_status.log_passwd], [],
403 AC_MSG_WARN([audit_tty_status.log_passwd is not available. The log_passwd option is disabled.]),
404 [[#include <libaudit.h>]])
410 AM_CONDITIONAL([HAVE_AUDIT_TTY_STATUS],
411 [test "x$HAVE_AUDIT_TTY_STATUS" = xyes])
413 AC_CHECK_HEADERS(xcrypt.h crypt.h)
414 AS_IF([test "x$ac_cv_header_xcrypt_h" = "xyes"],
415 [crypt_libs="xcrypt crypt"],
416 [crypt_libs="crypt"])
419 AC_SEARCH_LIBS([crypt],[$crypt_libs], LIBCRYPT="-l$ac_lib", LIBCRYPT="")
420 AC_CHECK_FUNCS(crypt_r crypt_gensalt_r)
423 if test "$LIBCRYPT" = "-lxcrypt" -a "$ac_cv_header_xcrypt_h" = "yes" ; then
424 AC_DEFINE([HAVE_LIBXCRYPT], 1, [Define to 1 if xcrypt support should be compiled in.])
427 AC_ARG_WITH([randomdev], AS_HELP_STRING([--with-randomdev=(<path>|yes|no)],[use specified random device instead of /dev/urandom or 'no' to disable]), opt_randomdev=$withval)
428 if test "$opt_randomdev" = yes -o -z "$opt_randomdev"; then
429 opt_randomdev="/dev/urandom"
430 elif test "$opt_randomdev" = no; then
433 if test -n "$opt_randomdev"; then
434 AC_DEFINE_UNQUOTED(PAM_PATH_RANDOMDEV, "$opt_randomdev", [Random device path.])
437 dnl check for libdb or libndbm as fallback. Some libndbm compat
438 dnl libraries are unuseable, so try libdb first.
440 AS_HELP_STRING([--enable-db=(db|ndbm|yes|no)],[Default behavior 'yes', which is to check for libdb first, followed by ndbm. Use 'no' to disable db support.]),
441 WITH_DB=$enableval, WITH_DB=yes)
442 AC_ARG_WITH([db-uniquename],
443 AS_HELP_STRING([--with-db-uniquename=extension],[Unique name for db libraries and functions.]))
444 if test x"$WITH_DB" != xno ; then
445 if test x"$WITH_DB" = xyes -o x"$WITH_DB" = xdb ; then
447 LIBS="$LIBS -ldb$with_db_uniquename"
448 AC_CHECK_FUNCS([db_create$with_db_uniquename db_create dbm_store$with_db_uniquename dbm_store],
449 [LIBDB="-ldb$with_db_uniquename"; break])
452 if test -z "$LIBDB" ; then
453 AC_CHECK_LIB([ndbm],[dbm_store], LIBDB="-lndbm", LIBDB="")
454 if test ! -z "$LIBDB" ; then
455 AC_CHECK_HEADERS(ndbm.h)
458 AC_CHECK_HEADERS(db.h)
462 AM_CONDITIONAL([HAVE_LIBDB], [test ! -z "$LIBDB"])
465 AS_HELP_STRING([--disable-nis], [Disable building NIS/YP support in pam_unix and pam_access]))
467 AS_IF([test "x$enable_nis" != "xno"], [
471 dnl if there's libtirpc available, prefer that over the system
473 PKG_CHECK_MODULES([libtirpc], [libtirpc], [
474 CFLAGS="$CFLAGS $libtirpc_CFLAGS"
475 LIBS="$LIBS $libtirpc_LIBS"
478 AC_SEARCH_LIBS([yp_get_default_domain], [nsl])
480 AC_CHECK_FUNCS([yp_get_default_domain yperr_string yp_master yp_bind yp_match yp_unbind])
481 AC_CHECK_HEADERS([rpc/rpc.h rpcsvc/ypclnt.h rpcsvc/yp_prot.h])
482 AC_CHECK_DECLS([getrpcport], , , [
484 # include <rpc/rpc.h>
488 NIS_CFLAGS="${CFLAGS%${old_CFLAGS}}"
489 NIS_LIBS="${LIBS%${old_LIBS}}"
495 AC_SUBST([NIS_CFLAGS])
498 AC_ARG_ENABLE([selinux],
499 AS_HELP_STRING([--disable-selinux],[do not use SELinux]),
500 WITH_SELINUX=$enableval, WITH_SELINUX=yes)
501 if test "$WITH_SELINUX" == "yes" ; then
502 AC_CHECK_LIB([selinux],[getfilecon], LIBSELINUX="-lselinux", LIBSELINUX="")
507 AM_CONDITIONAL([HAVE_LIBSELINUX], [test ! -z "$LIBSELINUX"])
508 if test ! -z "$LIBSELINUX" ; then
509 AC_DEFINE([WITH_SELINUX], 1, [Defined if SE Linux support is compiled in])
511 LIBS="$LIBS $LIBSELINUX"
512 AC_CHECK_FUNCS(setkeycreatecon)
513 AC_CHECK_FUNCS(getseuser)
517 dnl Checks for header files.
521 AC_CHECK_HEADERS(fcntl.h limits.h malloc.h sys/file.h sys/ioctl.h sys/time.h syslog.h net/if.h termio.h unistd.h sys/fsuid.h inittypes.h)
523 dnl For module/pam_lastlog
524 AC_CHECK_HEADERS(lastlog.h utmp.h utmpx.h)
526 dnl Checks for typedefs, structures, and compiler characteristics.
536 dnl Checks for library functions.
538 AC_PROG_GCC_TRADITIONAL
541 AC_CHECK_FUNCS(fseeko getdomainname gethostname gettimeofday lckpwdf mkdir select)
542 AC_CHECK_FUNCS(strcspn strdup strspn strstr strtol uname)
543 AC_CHECK_FUNCS(getutent_r getpwnam_r getpwuid_r getgrnam_r getgrgid_r getspnam_r)
544 AC_CHECK_FUNCS(getgrouplist getline getdelim)
545 AC_CHECK_FUNCS(inet_ntop inet_pton innetgr ruserok_af)
547 AC_CHECK_FUNCS(unshare, [UNSHARE=yes], [UNSHARE=no])
548 AM_CONDITIONAL([HAVE_UNSHARE], [test "$UNSHARE" = yes])
550 AC_ARG_ENABLE([regenerate-docu],
551 AS_HELP_STRING([--disable-regenerate-docu],[Don't re-build documentation from XML sources]),
552 [enable_docu=$enableval], [enable_docu=yes])
554 dnl Check for xsltproc
556 AC_PATH_PROG([XSLTPROC], [xsltproc])
557 if test -z "$XSLTPROC"; then
560 AC_PATH_PROG([XMLLINT], [xmllint],[/bin/true])
561 dnl check for DocBook DTD and stylesheets in the local catalog.
562 JH_CHECK_XML_CATALOG([-//OASIS//DTD DocBook XML V4.4//EN],
563 [DocBook XML DTD V4.4], [], enable_docu=no)
564 JH_CHECK_XML_CATALOG([http://docbook.sourceforge.net/release/xsl/current/manpages/docbook.xsl],
565 [DocBook XSL Stylesheets], [], enable_docu=no)
567 AC_PATH_PROG([BROWSER], [w3m])
568 if test ! -z "$BROWSER"; then
569 BROWSER="$BROWSER -T text/html -dump"
574 AC_PATH_PROG([FO2PDF], [fop])
576 AM_CONDITIONAL(ENABLE_REGENERATE_MAN, test x$enable_docu != xno)
577 AM_CONDITIONAL(ENABLE_GENERATE_PDF, test ! -z "$FO2PDF")
580 AM_GNU_GETTEXT_VERSION([0.18.3])
581 AM_GNU_GETTEXT([external])
582 AC_CHECK_FUNCS(dngettext)
584 AH_BOTTOM([#ifdef ENABLE_NLS
586 #define _(msgid) dgettext(PACKAGE, msgid)
587 #define N_(msgid) msgid
589 #define _(msgid) (msgid)
590 #define N_(msgid) msgid
591 #endif /* ENABLE_NLS */])
594 dnl Check for the availability of the kernel key management facility
595 dnl - The pam_keyinit module only requires the syscalls, not the error codes
597 AC_CHECK_DECL(__NR_keyctl, [have_key_syscalls=1],[have_key_syscalls=0],[#include <sys/syscall.h>])
598 AC_CHECK_DECL(ENOKEY, [have_key_errors=1],[have_key_errors=0],[#include <errno.h>])
600 HAVE_KEY_MANAGEMENT=0
601 if test $have_key_syscalls$have_key_errors = 11
603 HAVE_KEY_MANAGEMENT=1
606 if test $HAVE_KEY_MANAGEMENT = 1; then
607 AC_DEFINE([HAVE_KEY_MANAGEMENT], 1,
608 [Defined if the kernel key management facility is available])
610 AC_SUBST([HAVE_KEY_MANAGEMENT], $HAVE_KEY_MANAGEMENT)
612 AM_CONDITIONAL([HAVE_KEY_MANAGEMENT], [test "$have_key_syscalls" = 1])
614 dnl Files to be created from when we run configure
615 AC_CONFIG_FILES([Makefile libpam/Makefile libpamc/Makefile libpamc/test/Makefile \
616 libpam_misc/Makefile conf/Makefile conf/pam_conv1/Makefile \
619 modules/pam_access/Makefile modules/pam_cracklib/Makefile \
620 modules/pam_debug/Makefile modules/pam_deny/Makefile \
621 modules/pam_echo/Makefile modules/pam_env/Makefile \
622 modules/pam_faildelay/Makefile \
623 modules/pam_filter/Makefile modules/pam_filter/upperLOWER/Makefile \
624 modules/pam_ftp/Makefile modules/pam_group/Makefile \
625 modules/pam_issue/Makefile modules/pam_keyinit/Makefile \
626 modules/pam_lastlog/Makefile modules/pam_limits/Makefile \
627 modules/pam_listfile/Makefile modules/pam_localuser/Makefile \
628 modules/pam_loginuid/Makefile modules/pam_mail/Makefile \
629 modules/pam_mkhomedir/Makefile modules/pam_motd/Makefile \
630 modules/pam_namespace/Makefile \
631 modules/pam_nologin/Makefile modules/pam_permit/Makefile \
632 modules/pam_pwhistory/Makefile modules/pam_rhosts/Makefile \
633 modules/pam_rootok/Makefile modules/pam_exec/Makefile \
634 modules/pam_securetty/Makefile modules/pam_selinux/Makefile \
635 modules/pam_sepermit/Makefile \
636 modules/pam_shells/Makefile modules/pam_stress/Makefile \
637 modules/pam_succeed_if/Makefile modules/pam_tally/Makefile \
638 modules/pam_tally2/Makefile modules/pam_time/Makefile \
639 modules/pam_timestamp/Makefile modules/pam_tty_audit/Makefile \
640 modules/pam_umask/Makefile \
641 modules/pam_unix/Makefile modules/pam_userdb/Makefile \
642 modules/pam_warn/Makefile modules/pam_wheel/Makefile \
643 modules/pam_xauth/Makefile doc/Makefile doc/specs/Makefile \
644 doc/man/Makefile doc/sag/Makefile doc/adg/Makefile \
645 doc/mwg/Makefile examples/Makefile tests/Makefile \