Make pam work on HP-UX 11.0;jaearick@colby.edu

diff --git a/INSTALL b/INSTALL
index a4907947971d1807917b2aa853720b64dc5068f4..20a1c59da559970e7a711b4e2f102d9dc54a91ab 100644 (file)
--- a/INSTALL
+++ b/INSTALL
@@ -159,11 +159,17 @@ Special features/options:
        on the machine.
 
   --with-pam
-       Enable PAM support.  Tested on Redhat Linux 5.x, 6.0 and
-       Solaris 2.6, 7.
-       NOTE: on RedHat Linux (and perhaps others) you *must* install
-       an /etc/pam.d/sudo file.  You may either use the sample.pam
-       file included with sudo or use /etc/pam.d/su as a reference.
+       Enable PAM support.  Tested on:
+           Redhat Linux 5.x, 6.0, and 6.1
+           Solaris 2.6 and 7
+           HP-UX 11.0
+        NOTE: on RedHat Linux you *must* install an /etc/pam.d/sudo file.
+       You may either use the sample.pam file included with sudo or use
+       /etc/pam.d/su as a reference.  On Solaris and HP-UX 11 systems
+       you should check (and understand) the contents of /etc/pam.conf.
+       Do a "man pam.conf" for more information and consider using the
+       "debug" option, if available, with your PAM libraries in
+       /etc/pam.conf to obtain syslog output for debugging purposes.
 
   --with-AFS
        Enable AFS support with kerberos authentication.  Should work under
@@ -171,8 +177,14 @@ Special features/options:
        link without it.
 
   --with-DCE
-       Enable DCE support.  Known to work on HP-UX 9.X and 10.0.  Other
-       platforms may require source code and/or `configure' changes.
+       Enable DCE support.  Known to work on HP-UX 9.X, 10.X, and 11.0.
+       The use of PAM is recommended for HP-UX 11.X systems, since PAM is
+       fully implemented (this is not true for 10.20 and earlier versions).
+       Check to see that your 11.X (or other) system uses DCE via PAM by
+       looking at /etc/pam.conf to see if "libpam_dce" libraries are 
+       referenced there.  Other platforms may require source code and/or 
+       `configure' changes; you should check to see if your platform can 
+       access DCE via PAM before using this option.
 
   --disable-sia
        Disable SIA support.  This is the "Security Integration Architecture"

diff --git a/RUNSON b/RUNSON
index c3ffa3e8f163a9595ba805a25bd7d7c553600ff6..15284a3c6a9db9166e0ef01dd90c3ff3b055859a 100644 (file)
--- a/RUNSON
+++ b/RUNSON
@@ -38,7 +38,8 @@ HP-UX 10.20   hp700   bundled cc      1.6.2   Todd Miller      none
 HP-UX  10.20   PA-RISC2.0 bundled cc   1.5.4   Leon von Stauber none
 HP-UX  11.00   hp700   ansi-c          1.5.5b1 Alek Komarnitsky --with-C2
 HP-UX  11.00   hp700   bundled cc      1.5.5p5 Lynn Osburn      none
-HP-UX  10.20   hp700   gcc 2.8.1       1.5.6b2 Jeff Earickson   --with-DCE
+HP-UX  11.00   hp700   HP C compiler   1.6.2   Jeff Earickson   --with-pam
+HP-UX  10.20   hp700   gcc 2.95.2      1.6.2   Jeff Earickson   --with-DCE
 Ultrix 4.3     mips    bundled cc      1.6.2   Todd Miller      none
 Ultrix 4.3     mips    gcc2.7.2.1      1.5.9   Todd Miller      --with-skey
 IRIX   4.05H   mips    gcc2.6.3        1.5.3   Todd Miller      none

diff --git a/configure b/configure
index 876186a6875dde31aba915eb13b940fab54c428c..438e0cd795ebdbf627e2abd402340fa811e3e454 100755 (executable)
--- a/configure
+++ b/configure
@@ -7630,6 +7630,44 @@ EOF
     AUTH_OBJS="${AUTH_OBJS} kerb5.o"
 fi
 
+if test "$with_pam" = "yes"; then
+    echo $ac_n "checking for -ldl""... $ac_c" 1>&6
+echo "configure:7636: checking for -ldl" >&5
+if eval "test \"`echo '$''{'ac_cv_lib_dl'+set}'`\" = set"; then
+  echo $ac_n "(cached) $ac_c" 1>&6
+else
+  ac_save_LIBS="$LIBS"
+LIBS="-ldl  $LIBS"
+cat > conftest.$ac_ext <<EOF
+#line 7643 "configure"
+#include "confdefs.h"
+
+int main() {
+main()
+; return 0; }
+EOF
+if { (eval echo configure:7650: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest; then
+  rm -rf conftest*
+  ac_cv_lib_dl=yes
+else
+  echo "configure: failed program was:" >&5
+  cat conftest.$ac_ext >&5
+  rm -rf conftest*
+  ac_cv_lib_dl=no
+fi
+rm -f conftest*
+LIBS="$ac_save_LIBS"
+
+fi
+echo "$ac_t""$ac_cv_lib_dl" 1>&6
+if test "$ac_cv_lib_dl" = yes; then
+  SUDO_LIBS="${SUDO_LIBS} -ldl -lpam"
+else
+  SUDO_LIBS="${SUDO_LIBS} -lpam"
+fi
+
+fi
+
 if test "$with_kerb4" = "yes"; then
     cat >> confdefs.h <<\EOF
 #define HAVE_KERB4 1
@@ -7658,21 +7696,21 @@ EOF
     fi
 
     echo $ac_n "checking for -ldes""... $ac_c" 1>&6
-echo "configure:7662: checking for -ldes" >&5
+echo "configure:7700: checking for -ldes" >&5
 if eval "test \"`echo '$''{'ac_cv_lib_des'+set}'`\" = set"; then
   echo $ac_n "(cached) $ac_c" 1>&6
 else
   ac_save_LIBS="$LIBS"
 LIBS="-ldes  $LIBS"
 cat > conftest.$ac_ext <<EOF
-#line 7669 "configure"
+#line 7707 "configure"
 #include "confdefs.h"
 
 int main() {
 main()
 ; return 0; }
 EOF
-if { (eval echo configure:7676: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest; then
+if { (eval echo configure:7714: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest; then
   rm -rf conftest*
   ac_cv_lib_des=yes
 else
@@ -7695,10 +7733,6 @@ fi
     AUTH_OBJS="${AUTH_OBJS} kerb4.o"
 fi
 
-if test "$with_pam" = "yes"; then
-    SUDO_LIBS="${SUDO_LIBS} -ldl -lpam"
-fi
-
 if test "$with_AFS" = "yes"; then
 
     # looks like the "standard" place for AFS libs is /usr/afsws/lib
@@ -7795,7 +7829,7 @@ if test "$with_authenticate" = "yes"; then
 fi
 
 echo $ac_n "checking for log file location""... $ac_c" 1>&6
-echo "configure:7799: checking for log file location" >&5
+echo "configure:7833: checking for log file location" >&5
 if test -n "$with_logpath"; then
     echo "$ac_t""$with_logpath" 1>&6
     cat >> confdefs.h <<EOF
@@ -7825,7 +7859,7 @@ else
 fi
 
 echo $ac_n "checking for timestamp file location""... $ac_c" 1>&6
-echo "configure:7829: checking for timestamp file location" >&5
+echo "configure:7863: checking for timestamp file location" >&5
 if test -n "$with_timedir"; then
     echo "$ac_t""$with_timedir" 1>&6
     cat >> confdefs.h <<EOF

diff --git a/configure.in b/configure.in
index 35b5eb90850fad2766fcf5927ed89a1233696029..7f250bcbcfd2b5426dcff7606acfd2e1f6be72ca 100644 (file)
--- a/configure.in
+++ b/configure.in
@@ -1432,6 +1432,13 @@ if test "$with_kerb5" = "yes"; then
     AUTH_OBJS="${AUTH_OBJS} kerb5.o"
 fi
 
+dnl
+dnl PAM libs
+dnl
+if test "$with_pam" = "yes"; then
+    AC_HAVE_LIBRARY(dl, SUDO_LIBS="${SUDO_LIBS} -ldl -lpam", SUDO_LIBS="${SUDO_LIBS} -lpam")
+fi
+
 dnl
 dnl Find kerberos 4 includes and libs or complain
 dnl
@@ -1463,13 +1470,6 @@ if test "$with_kerb4" = "yes"; then
     AUTH_OBJS="${AUTH_OBJS} kerb4.o"
 fi
 
-dnl
-dnl PAM libs
-dnl
-if test "$with_pam" = "yes"; then
-    SUDO_LIBS="${SUDO_LIBS} -ldl -lpam"
-fi
-
 dnl
 dnl extra AFS libs and includes
 dnl