
Finally. We're almost at parity for the template compiler. Now we have a build option to use templating: `./configure --enable-asn1-templating` Tests fail if you build `rfc2459.asn1` with `--template`. TBD: Figure out what differences remain between the two compilers, and fix the templating compiler accordingly, adding tests along the way. Making IMPLICIT tags work in the templating compiler turned out to be a simple fix: don't attempt to do anything clever about IMPLICIT tags in the template generator in the compiler other than denoting them -- instead leave all the smarts about IMPLICIT tags to the interpreter. This might be a very slight pessimization, but also a great simplification. The result is very elegant: when the interpreter finds an IMPLICIT tag it then recurses to find the template for the body of the type so-tagged, and evaluates that. Much more elegant than the code generated by the non-template compiler, not least for not needing any additional temporary memory allocation. With this we finally have parity in basic testing of the template compiler. Indeed, for IMPLICIT tags the template compiler and interpreter might even be better because they support IMPLICIT tags with BER lengths, whereas the non-template compiler doesn't (mostly because `der_replace_tag()` needs to be changed to support it. And, of course, the template compiler is simply superior in that it produces smaller code and is *much* easier to work with because the functions to interpret templates are small and simple. Which means we can add more functions to deal with other encoding rules fairly trivially. It should be possible to add all of these with very little work, almost all of it localized to `lib/asn1/template.c`: - PER Packed Encoding Rules [X.691] - XER XML Encoding Rules [X.693] - OER Octet Encoding Rules [X.696] (intended to replace PER) - JER JSON Encoding Rules [X.697] (doubles as visual representation) - GSER Generic String E.R.s [RFC3641] (a visual representation) - XDR External Data Repr. [STD67][RFC4506] (XDR is *not* an ASN.1 encoding rules specification, but it's a *lot* like PER/OER but with 4-octet alignment, and is specified for the syntax equivalent (XDR) of only a subset of ASN.1 syntax and semantics.) All we'd have to do is add variants of `_asn1_{length,encode,decode}()` for each set of rules, then generate per-type stub functions that call them (as we already do for DER). We could then have an encoding rule transliteration program that takes a `TypeName` and some representation of a value encoded by some encoding rules, and outputs the same thing encoded by a different set of rules. This would double as a pretty-printer and parser if we do add support for JER and/or GSER. It would find the template for the given type using `dlsym()` against some shared object (possibly `libasn1` itself). Whereas generating source code for C (or whatever language) for additional ERs requires much more work. Plus, templates are much smaller, and the interpreter is tiny, which yields much smaller text and much smaller CPU icache/dcache footprint, which yields better performance in many cases. As well, the template system should be much easier to port to other languages. Though in the cases of, e.g., Rust, it would require use of `unsafe` in the interpreter, so in fact the inverse might be true: that it's easier to generate safe Rust code than to implement a template interpreter in Rust. Similarly for Haskell, OCAML, etc. But wherever the template interpreter is easy to implement, it's a huge win. Note that implementing OER and PER using the templates as they are currently would be a bit of a challenge, as the interpreter would have to first do a pass of each SEQUENCE/SET to determine the size and layout of the OER/PER sequence/set preamble by counting the number of OPTIONAL/DEFAULT members, BOOLEAN members, and extensibility markers with extensions present. We could always generate more entries to encode precomputed preamble metadata. We would also need to add a template entry type for extensibility markers, which currently we do not.
816 lines
20 KiB
Plaintext
816 lines
20 KiB
Plaintext
dnl Process this file with autoconf to produce a configure script.
|
|
AC_REVISION($Revision$)
|
|
AC_PREREQ(2.62)
|
|
test -z "$CFLAGS" && CFLAGS="-g"
|
|
AC_INIT([Heimdal],[7.99.1],[https://github.com/heimdal/heimdal/issues])
|
|
AC_CONFIG_SRCDIR([kuser/kinit.c])
|
|
AC_CONFIG_HEADERS(include/config.h)
|
|
AC_CONFIG_MACRO_DIR([cf])
|
|
|
|
AM_INIT_AUTOMAKE([foreign 1.11])
|
|
AM_MAINTAINER_MODE
|
|
|
|
LT_PREREQ([2.2])
|
|
LT_INIT([shared static win32-dll])
|
|
|
|
|
|
dnl Checks for programs.
|
|
AC_PROG_CC
|
|
AM_PROG_CC_C_O
|
|
AC_PROG_CPP
|
|
AC_CHECK_PROG(CLANG_FORMAT, clang-format, [clang-format], [no])
|
|
|
|
m4_ifdef([AM_SILENT_RULES], [AM_SILENT_RULES([yes])])
|
|
|
|
AC_PREFIX_DEFAULT(/usr/heimdal)
|
|
|
|
test "$sysconfdir" = '${prefix}/etc' && sysconfdir='/etc'
|
|
test "$localstatedir" = '${prefix}/var' && localstatedir='/var/heimdal'
|
|
|
|
AC_CANONICAL_HOST
|
|
CANONICAL_HOST=$host
|
|
AC_SUBST(CANONICAL_HOST)
|
|
|
|
rk_SYS_LARGEFILE
|
|
|
|
rk_AIX
|
|
rk_IRIX
|
|
rk_SUNOS
|
|
|
|
dnl
|
|
dnl this is needed to run the configure tests against glibc
|
|
dnl
|
|
AC_DEFINE([_GNU_SOURCE], 1,
|
|
[Define to enable extensions on glibc-based systems such as Linux.])
|
|
|
|
AC_OBJEXT
|
|
AC_EXEEXT
|
|
|
|
dnl
|
|
dnl this is needed when der-protos.h or der-private.h has to be generated
|
|
dnl
|
|
if ! test -f "$srcdir/lib/asn1/der-protos.h" ||
|
|
! test -f "$srcdir/lib/asn1/der-private.h"; then
|
|
AC_KRB_PROG_PERL
|
|
AC_KRB_PERL_MOD(Getopt::Std)
|
|
AC_KRB_PERL_MOD(File::Compare)
|
|
AC_KRB_PERL_MOD(JSON)
|
|
fi
|
|
|
|
dnl AC_KRB_PROG_YACC
|
|
AC_PROG_YACC
|
|
AM_PROG_LEX
|
|
AS_IF([$LEX --nounput -V > /dev/null 2>&1 && test $? -eq 0],
|
|
[AC_SUBST([FLEXNOUNPUTARGS], ["--nounput"])],
|
|
[AC_SUBST([FLEXNOUNPUTARGS], [""])])
|
|
dnl AC_PROG_RANLIB
|
|
AC_PROG_AWK
|
|
AC_KRB_PROG_LN_S
|
|
|
|
AC_MIPS_ABI
|
|
CC="$CC $abi"
|
|
libdir="$libdir$abilibdirext"
|
|
|
|
AC_C___ATTRIBUTE__
|
|
|
|
AM_CONDITIONAL(ENABLE_SHARED, test "$enable_shared" = "yes")
|
|
rk_VERSIONSCRIPT
|
|
|
|
dnl Code coverage
|
|
AC_ARG_ENABLE([gcov],
|
|
AC_HELP_STRING([--enable-gcov], [enable gcov code coverage tool]))
|
|
AM_CONDITIONAL([ENABLE_GCOV], [test "x$enable_gcov" = xyes])
|
|
|
|
|
|
dnl
|
|
dnl Helper bits for cross compiling
|
|
dnl
|
|
|
|
|
|
|
|
AM_CONDITIONAL(CROSS_COMPILE, test "${cross_compiling}" = yes)
|
|
|
|
AC_ARG_WITH(cross-tools,
|
|
AS_HELP_STRING([--with-cross-tools=dir], [use cross tools in dir]),
|
|
[if test "$withval" = "yes"; then
|
|
AC_MSG_ERROR([Need path to cross tools])
|
|
fi
|
|
with_cross_tools="${with_cross_tools}/"
|
|
])
|
|
|
|
if test "${cross_compiling}" != yes ; then
|
|
|
|
ASN1_COMPILE="\$(top_builddir)/lib/asn1/asn1_compile\$(EXEEXT)"
|
|
SLC="\$(top_builddir)/lib/sl/slc"
|
|
|
|
ASN1_COMPILE_DEP="\$(ASN1_COMPILE)"
|
|
SLC_DEP="\$(SLC)"
|
|
else
|
|
ASN1_COMPILE="${with_cross_tools}asn1_compile"
|
|
SLC="${with_cross_tools}slc"
|
|
|
|
ASN1_COMPILE_DEP=
|
|
SLC_DEP=
|
|
|
|
ac_cv_prog_COMPILE_ET=${with_cross_tools}compile_et
|
|
|
|
fi
|
|
|
|
AC_SUBST([ASN1_COMPILE])
|
|
AC_SUBST([ASN1_COMPILE_DEP])
|
|
AC_SUBST([SLC])
|
|
AC_SUBST([SLC_DEP])
|
|
|
|
dnl ---
|
|
|
|
AC_DEFINE(HEIM_WEAK_CRYPTO, 1, [Define if you want support for weak crypto])
|
|
|
|
rk_TEST_PACKAGE(openldap,
|
|
[#include <lber.h>
|
|
#include <ldap.h>],
|
|
[-lldap -llber],,,OPENLDAP)
|
|
|
|
AC_ARG_ENABLE(hdb-openldap-module,
|
|
AS_HELP_STRING([--enable-hdb-openldap-module],
|
|
[if you want support to build openldap hdb as shared object]))
|
|
if test "$enable_hdb_openldap_module" = yes -a "$with_openldap" = yes; then
|
|
AC_DEFINE(OPENLDAP_MODULE, 1, [Define if you want support for hdb ldap module])
|
|
fi
|
|
AM_CONDITIONAL(OPENLDAP_MODULE, test "$enable_hdb_openldap_module" = yes -a "$with_openldap" = yes)
|
|
|
|
AC_ARG_ENABLE(asn1-templating,
|
|
AS_HELP_STRING([--enable-asn1-templating],
|
|
[if you want disable to use of the ASN.1 templating compiler]))
|
|
AM_CONDITIONAL(ASN1_TEMPLATING, test "x$enable_asn1_templating" = xyes)
|
|
|
|
dnl
|
|
dnl Optional modules, pk-init, digest, kx509
|
|
dnl
|
|
|
|
AC_ARG_ENABLE(pk-init,
|
|
AS_HELP_STRING([--disable-pk-init],
|
|
[if you want disable to PK-INIT support]))
|
|
if test "$enable_pk_init" != no ;then
|
|
AC_DEFINE([PKINIT], 1, [Define to enable PKINIT.])
|
|
fi
|
|
AM_CONDITIONAL(PKINIT, test "$enable_pk_init" != no)
|
|
|
|
AC_ARG_ENABLE(digest,
|
|
AS_HELP_STRING([--disable-digest],
|
|
[if you want disable to DIGEST support]))
|
|
if test "$enable_digest" != no ;then
|
|
AC_DEFINE([DIGEST], 1, [Define to enable DIGEST.])
|
|
fi
|
|
|
|
AC_ARG_ENABLE(kx509,
|
|
AS_HELP_STRING([--disable-kx509],
|
|
[if you want disable to kx509 support]))
|
|
if test "$enable_kx509" != no ;then
|
|
AC_DEFINE([KX509], 1, [Define to enable kx509.])
|
|
fi
|
|
|
|
dnl Need to test if pkg-config exists
|
|
PKG_PROG_PKG_CONFIG
|
|
|
|
dnl libcap-ng
|
|
AC_ARG_WITH([capng],
|
|
AC_HELP_STRING([--with-capng], [use libcap-ng to drop KDC privileges @<:@default=check@:>@]),
|
|
[],
|
|
[with_capng=check])
|
|
if test "$with_capng" != "no"; then
|
|
PKG_CHECK_MODULES([CAPNG], [libcap-ng >= 0.4.0],
|
|
[with_capng=yes],[with_capng=no])
|
|
fi
|
|
if test "$with_capng" = "yes"; then
|
|
AC_DEFINE_UNQUOTED([HAVE_CAPNG], 1, [whether capng is available for privilege reduction])
|
|
fi
|
|
AM_CONDITIONAL([HAVE_CAPNG], [test "$with_capng" != "no"])
|
|
AC_SUBST([CAPNG_CFLAGS])
|
|
AC_SUBST([CAPNG_LIBS])
|
|
|
|
dnl libmicrohttpd
|
|
AC_ARG_WITH([microhttpd],
|
|
AC_HELP_STRING([--with-microhttpd], [use microhttpd to serve KDC REST API @<:@default=check@:>@]),
|
|
[],
|
|
[with_microhttpd=check])
|
|
if test "$with_microhttpd" != "no"; then
|
|
PKG_CHECK_MODULES([MICROHTTPD], [libmicrohttpd >= 0.9.37],
|
|
[with_microhttpd=yes],[with_microhttpd=no])
|
|
fi
|
|
if test "$with_microhttpd" = "yes"; then
|
|
AC_DEFINE_UNQUOTED([HAVE_MICROHTTPD], 1, [whether libmicrohttpd is available for KDC REST API])
|
|
fi
|
|
AM_CONDITIONAL([HAVE_MICROHTTPD], [test "$with_microhttpd" != "no"])
|
|
AC_SUBST([MICROHTTPD_CFLAGS])
|
|
AC_SUBST([MICROHTTPD_LIBS])
|
|
|
|
dnl libcjwt
|
|
AC_ARG_WITH([cjwt],
|
|
AC_HELP_STRING([--with-cjwt], [(Experimental) use cjwt to validate JWT tokens @<:@default=check@:>@]),
|
|
[],
|
|
[with_cjwt=check])
|
|
if test "$with_cjwt" != "no"; then
|
|
PKG_CHECK_MODULES([CJWT], [libcjwt >= 1.0.0],
|
|
[with_cjwt=yes],[with_cjwt=no])
|
|
fi
|
|
if test "$with_cjwt" = "yes"; then
|
|
AC_DEFINE_UNQUOTED([HAVE_CJWT], 1, [whether libcjwt is available for KDC REST API])
|
|
fi
|
|
AM_CONDITIONAL([HAVE_CJWT], [test "$with_cjwt" != "no"])
|
|
AC_SUBST([CJWT_CFLAGS])
|
|
AC_SUBST([CJWT_LIBS])
|
|
|
|
dnl libcjson
|
|
AC_ARG_WITH([cjson],
|
|
AC_HELP_STRING([--with-cjson], [(Experimental) use cJSON to extract private claims from JWT tokens @<:@default=check@:>@]),
|
|
[],
|
|
[with_cjson=check])
|
|
if test "$with_cjson" != "no"; then
|
|
PKG_CHECK_MODULES([CJSON], [libcjson >= 1.0.0],
|
|
[with_cjson=yes],[with_cjson=no])
|
|
fi
|
|
if test "$with_cjson" = "yes"; then
|
|
AC_DEFINE_UNQUOTED([HAVE_CJSON], 1, [whether libcjson is available for KDC REST API])
|
|
fi
|
|
AM_CONDITIONAL([HAVE_CJSON], [test "$with_cjson" != "no"])
|
|
AC_SUBST([CJSON_CFLAGS])
|
|
AC_SUBST([CJSON_LIBS])
|
|
|
|
dnl Check for sqlite
|
|
rk_TEST_PACKAGE(sqlite3,
|
|
[#include <sqlite3.h>
|
|
#ifndef SQLITE_OPEN_CREATE
|
|
#error "old version"
|
|
#endif],
|
|
[-lsqlite3],,,SQLITE3)
|
|
|
|
if test "X$with_sqlite3" != Xyes ; then
|
|
INCLUDE_sqlite3="-I\$(top_srcdir)/lib/sqlite"
|
|
LIB_sqlite3="\$(top_builddir)/lib/sqlite/libheimsqlite.la"
|
|
fi
|
|
AM_CONDITIONAL(SQLITE3, test "X$with_sqlite3" = Xyes)
|
|
|
|
AC_DEFINE(HAVE_SQLITE3, 1, [Define if you want support for sqlite in Heimdal.])
|
|
|
|
AC_ARG_ENABLE(sqlite-cache,
|
|
AS_HELP_STRING([--disable-sqlite-cache],[if you want support for cache in sqlite]))
|
|
if test "$enable_sqlite_cache" != no; then
|
|
AC_DEFINE(HAVE_SCC, 1, [Define if you want support for cache in sqlite.])
|
|
fi
|
|
AM_CONDITIONAL(have_scc, test "$enable_sqlite_cache" != no)
|
|
|
|
|
|
dnl check for libintl
|
|
rk_TEST_PACKAGE(libintl,
|
|
[#include <libintl.h>],
|
|
[-lintl],,,LIBINTL)
|
|
|
|
dnl path where the hdb directory is stored
|
|
AC_ARG_WITH([hdbdir],
|
|
[AS_HELP_STRING([--with-hdbdir],[Default location for KDC database @<:@default=/var/heimdal@:>@])],
|
|
[],
|
|
[with_hdbdir=/var/heimdal])
|
|
DIR_hdbdir="$with_hdbdir"
|
|
AC_SUBST([DIR_hdbdir])
|
|
|
|
|
|
AM_CONDITIONAL(KRB5, true)
|
|
AM_CONDITIONAL(do_roken_rename, true)
|
|
|
|
AC_DEFINE(SUPPORT_INETD, 1, [Enable use of inetd style startup.])dnl
|
|
|
|
|
|
AC_DEFINE(KRB5, 1, [Enable Kerberos 5 support in applications.])dnl
|
|
AC_SUBST(LIB_kdb)dnl
|
|
|
|
KRB_CRYPTO
|
|
|
|
KRB_PTHREADS
|
|
|
|
AC_ARG_ENABLE(dce,
|
|
AS_HELP_STRING([--enable-dce],[if you want support for DCE/DFS PAG's]))
|
|
if test "$enable_dce" = yes; then
|
|
AC_DEFINE(DCE, 1, [Define if you want support for DCE/DFS PAG's.])
|
|
fi
|
|
AM_CONDITIONAL(DCE, test "$enable_dce" = yes)
|
|
|
|
## XXX quite horrible:
|
|
if test -f /etc/ibmcxx.cfg; then
|
|
dpagaix_ldadd=`sed -n '/^xlc_r4/,/^$/p' /etc/ibmcxx.cfg | sed -n -e '/libraries/{;s/^[[^=]]*=\(.*\)/\1/;s/,/ /gp;}'`
|
|
dpagaix_cflags=`sed -n '/^xlc_r4/,/^$/p' /etc/ibmcxx.cfg | sed -n -e '/options/{;s/^[[^=]]*=\(.*\)/\1/;s/-q[^,]*//;s/,/ /gp;}'`
|
|
dpagaix_ldflags=
|
|
else
|
|
dpagaix_cflags="-D_THREAD_SAFE -D_AIX_PTHREADS_D7 -D_AIX32_THREADS=1 -D_AES_SOURCE -D_AIX41 -I/usr/include/dce"
|
|
dpagaix_ldadd="-L/usr/lib/threads -ldcelibc_r -ldcepthreads -lpthreads_compat lpthreads -lc_r"
|
|
dpagaix_ldflags="-Wl,-bI:dfspag.exp"
|
|
fi
|
|
AC_SUBST(dpagaix_cflags)
|
|
AC_SUBST(dpagaix_ldadd)
|
|
AC_SUBST(dpagaix_ldflags)
|
|
|
|
AC_ARG_ENABLE([afs-support],
|
|
AS_HELP_STRING([--disable-afs-support],[if you don't want support for AFS]))
|
|
if test "$enable_afs_support" = no; then
|
|
AC_DEFINE(NO_AFS, 1, [Define if you don't wan't support for AFS.])
|
|
NO_AFS="1"
|
|
fi
|
|
AC_SUBST(NO_AFS)dnl
|
|
AM_CONDITIONAL(NO_AFS, test "$enable_afs_support" = no)
|
|
|
|
rk_DB
|
|
|
|
dnl AC_ROKEN(10,[/usr/heimdal /usr/athena],[lib/roken],[$(top_builddir)/lib/roken/libroken.la],[-I$(top_builddir)/lib/roken -I$(top_srcdir)/lib/roken])
|
|
|
|
rk_ROKEN(lib/roken)
|
|
LIBADD_roken="$LIB_roken"
|
|
AC_SUBST(LIBADD_roken)dnl
|
|
LIB_roken="\$(top_builddir)/lib/vers/libvers.la $LIB_roken"
|
|
|
|
rk_OTP
|
|
|
|
rk_LIBDISPATCH
|
|
|
|
AC_CHECK_OSFC2
|
|
|
|
AC_ARG_ENABLE(mmap,
|
|
AS_HELP_STRING([--disable-mmap],[disable use of mmap]))
|
|
if test "$enable_mmap" = "no"; then
|
|
AC_DEFINE(NO_MMAP, 1, [Define if you don't want to use mmap.])
|
|
fi
|
|
|
|
AC_ARG_ENABLE(afs-string-to-key,
|
|
AS_HELP_STRING([--disable-afs-string-to-key],
|
|
[disable use of weak AFS string-to-key functions]),
|
|
[], [enable_afs_string_to_key=yes])
|
|
|
|
if test "$enable_afs_string_to_key" = "yes"; then
|
|
AC_DEFINE(ENABLE_AFS_STRING_TO_KEY, 1, [Define if want to use the weak AFS string to key functions.])
|
|
ENABLE_AFS_STRING_TO_KEY=1
|
|
fi
|
|
AC_SUBST(ENABLE_AFS_STRING_TO_KEY)dnl
|
|
|
|
|
|
rk_CHECK_MAN
|
|
|
|
rk_TEST_PACKAGE(readline,
|
|
[#include <stdio.h>
|
|
#if defined(HAVE_READLINE_READLINE_H)
|
|
#include <readline/readline.h>
|
|
#elif defined(HAVE_READLINE_H)
|
|
#include <readline.h>
|
|
#endif
|
|
],-lreadline,,, READLINE,, [readline.h readline/readline.h])
|
|
|
|
rk_TEST_PACKAGE(libedit,
|
|
[#include <stdio.h>
|
|
#if defined(HAVE_READLINE_READLINE_H)
|
|
#include <readline/readline.h>
|
|
#elif defined(HAVE_READLINE_H)
|
|
#include <readline.h>
|
|
#elif defined(HAVE_EDITLINE_READLINE_H)
|
|
#include <editline/readline.h>
|
|
#endif
|
|
],-ledit,,, READLINE,, [readline.h readline/readline.h editline/readline.h])
|
|
|
|
AC_CONFIG_SUBDIRS([lib/libedit])
|
|
|
|
KRB_C_BIGENDIAN
|
|
AC_C_INLINE
|
|
|
|
dnl AM_C_PROTOTYPES
|
|
|
|
dnl Checks for typedefs, structures, and compiler characteristics.
|
|
AC_C_CONST
|
|
AC_TYPE_OFF_T
|
|
AC_CHECK_TYPE_EXTRA(mode_t, unsigned short, [])
|
|
AC_CHECK_TYPE_EXTRA(sig_atomic_t, int, [#include <signal.h>])
|
|
AC_HAVE_TYPE([long long])
|
|
AC_HEADER_TIME
|
|
AC_STRUCT_TM
|
|
|
|
dnl Checks for header files.
|
|
AC_HEADER_STDC
|
|
|
|
AC_CHECK_HEADERS([\
|
|
CommonCrypto/CommonDigest.h \
|
|
CommonCrypto/CommonCryptor.h \
|
|
arpa/telnet.h \
|
|
bind/bitypes.h \
|
|
bsdsetjmp.h \
|
|
curses.h \
|
|
dlfcn.h \
|
|
execinfo.h \
|
|
fnmatch.h \
|
|
inttypes.h \
|
|
io.h \
|
|
keyutils.h \
|
|
libutil.h \
|
|
limits.h \
|
|
maillock.h \
|
|
netgroup.h \
|
|
netinet/in6_machtypes.h \
|
|
netinet/tcp.h \
|
|
pthread.h \
|
|
pty.h \
|
|
sac.h \
|
|
sgtty.h \
|
|
siad.h \
|
|
signal.h \
|
|
strings.h \
|
|
stropts.h \
|
|
stdatomic.h \
|
|
sys/bitypes.h \
|
|
sys/category.h \
|
|
sys/file.h \
|
|
sys/filio.h \
|
|
sys/ioccom.h \
|
|
sys/mman.h \
|
|
sys/param.h \
|
|
sys/pty.h \
|
|
sys/ptyio.h \
|
|
sys/select.h \
|
|
sys/socket.h \
|
|
sys/str_tty.h \
|
|
sys/stream.h \
|
|
sys/stropts.h \
|
|
sys/syscall.h \
|
|
sys/termio.h \
|
|
sys/timeb.h \
|
|
sys/times.h \
|
|
sys/types.h \
|
|
sys/un.h \
|
|
locale.h \
|
|
termcap.h \
|
|
termio.h \
|
|
termios.h \
|
|
time.h \
|
|
tmpdir.h \
|
|
udb.h \
|
|
util.h \
|
|
])
|
|
|
|
dnl On Solaris 8 there's a compilation warning for term.h because
|
|
dnl it doesn't define `bool'.
|
|
AC_CHECK_HEADERS(term.h, , , -)
|
|
|
|
dnl aix have asl.h (A/IX screen library) that we don't want
|
|
AC_CHECK_HEADERS(asl.h, , , [
|
|
#include <asl.h>
|
|
#ifndef ASL_STRING_EMERG
|
|
#error ASL_STRING_EMERG missing
|
|
#endif])
|
|
|
|
AC_CHECK_HEADERS(net/if.h, , , [AC_INCLUDES_DEFAULT
|
|
#if HAVE_SYS_SOCKET_H
|
|
#include <sys/socket.h>
|
|
#endif])
|
|
|
|
AC_CHECK_HEADERS(sys/ptyvar.h, , , [AC_INCLUDES_DEFAULT
|
|
#if HAVE_SYS_TTY_H
|
|
#include <sys/tty.h>
|
|
#endif])
|
|
|
|
AC_CHECK_HEADERS(sys/strtty.h, , , [AC_INCLUDES_DEFAULT
|
|
#if HAVE_TERMIOS_H
|
|
#include <termios.h>
|
|
#endif
|
|
#if HAVE_SYS_STREAM_H
|
|
#include <sys/stream.h>
|
|
#endif])
|
|
|
|
AC_CHECK_HEADERS(sys/ucred.h, , , [AC_INCLUDES_DEFAULT
|
|
#if HAVE_SYS_TYPES_H
|
|
#include <sys/types.h>
|
|
#endif
|
|
#if HAVE_SYS_PARAM_H
|
|
#include <sys/param.h>
|
|
#endif])
|
|
|
|
AC_CHECK_HEADERS(security/pam_modules.h, , , [AC_INCLUDES_DEFAULT
|
|
#include <security/pam_appl.h>
|
|
])
|
|
|
|
dnl export symbols
|
|
rk_WIN32_EXPORT(BUILD_KRB5_LIB, KRB5_LIB)
|
|
rk_WIN32_EXPORT(BUILD_ROKEN_LIB, ROKEN_LIB)
|
|
rk_WIN32_EXPORT(BUILD_GSSAPI_LIB, GSSAPI_LIB)
|
|
|
|
dnl Checks for libraries.
|
|
|
|
AC_FIND_FUNC_NO_LIBS(logwtmp, util,[
|
|
#ifdef HAVE_UTIL_H
|
|
#include <util.h>
|
|
#endif
|
|
],[0,0,0])
|
|
AC_FIND_FUNC_NO_LIBS(logout, util,[
|
|
#ifdef HAVE_UTIL_H
|
|
#include <util.h>
|
|
#endif
|
|
],[0])
|
|
AC_FIND_FUNC_NO_LIBS(openpty, util,[
|
|
#ifdef HAVE_UTIL_H
|
|
#include <util.h>
|
|
#endif
|
|
],[0,0,0,0,0])
|
|
|
|
AC_FIND_FUNC_NO_LIBS(tgetent, termcap ncurses curses tinfo,[
|
|
#ifdef HAVE_TERMCAP_H
|
|
#include <termcap.h>
|
|
#endif
|
|
#ifdef HAVE_CURSES_H
|
|
#include <curses.h>
|
|
#endif
|
|
],[0,0])
|
|
|
|
dnl Checks for library functions.
|
|
|
|
AC_CHECK_FUNCS([ \
|
|
_getpty \
|
|
_scrsize \
|
|
arc4random \
|
|
backtrace \
|
|
fcntl \
|
|
fork \
|
|
fseeko \
|
|
ftello \
|
|
getpeereid \
|
|
getpeerucred \
|
|
getresgid \
|
|
getresuid \
|
|
grantpt \
|
|
kill \
|
|
mktime \
|
|
ptsname \
|
|
rand \
|
|
revoke \
|
|
select \
|
|
setitimer \
|
|
setpcred \
|
|
setpgid \
|
|
setproctitle \
|
|
setregid \
|
|
setresgid \
|
|
setresuid \
|
|
setreuid \
|
|
setsid \
|
|
setutent \
|
|
sigaction \
|
|
strstr \
|
|
ttyname \
|
|
ttyslot \
|
|
umask \
|
|
unlockpt \
|
|
vhangup \
|
|
waitpid \
|
|
yp_get_default_domain \
|
|
])
|
|
|
|
AC_MSG_CHECKING([checking for __sync_add_and_fetch])
|
|
AC_LINK_IFELSE([AC_LANG_PROGRAM([[#include <sys/types.h>]],
|
|
[[unsigned int foo, bar; bar = __sync_add_and_fetch(&foo, 1);]])],
|
|
[ac_rk_have___sync_add_and_fetch=yes], [ac_rk_have___sync_add_and_fetch=no])
|
|
if test "$ac_rk_have___sync_add_and_fetch" = "yes" ; then
|
|
AC_DEFINE_UNQUOTED(HAVE___SYNC_ADD_AND_FETCH, 1, [have __sync_add_and_fetch])
|
|
fi
|
|
AC_MSG_RESULT($ac_rk_have___sync_add_and_fetch)
|
|
|
|
AC_FUNC_MMAP
|
|
|
|
KRB_CAPABILITIES
|
|
rk_DLADDR
|
|
|
|
AC_CHECK_GETPWNAM_R_POSIX
|
|
AC_CHECK_GETPWUID_R_POSIX
|
|
|
|
dnl detect doors on solaris
|
|
if test "$enable_pthread_support" != no; then
|
|
saved_LIBS="$LIBS"
|
|
LIBS="$LIBS $PTHREADS_LIBS"
|
|
AC_FIND_FUNC_NO_LIBS(door_create, door)
|
|
LIBS="$saved_LIBS"
|
|
fi
|
|
|
|
AC_ARG_ENABLE(kcm,
|
|
AS_HELP_STRING([--enable-kcm],[enable Kerberos Credentials Manager]),
|
|
,[enable_kcm=yes])
|
|
|
|
if test "$enable_kcm" = yes ; then
|
|
if test "$ac_cv_header_sys_un_h" != yes -a "$ac_cv_funclib_door_create" != yes ; then
|
|
enable_kcm=no
|
|
fi
|
|
fi
|
|
if test "$enable_kcm" = yes; then
|
|
AC_DEFINE(HAVE_KCM, 1,
|
|
[Define if you want to use the Kerberos Credentials Manager.])
|
|
fi
|
|
AM_CONDITIONAL(KCM, test "$enable_kcm" = yes)
|
|
|
|
dnl detect keyring on Linux
|
|
if test "$ac_cv_header_keyutils_h" = yes; then
|
|
AC_CHECK_SIZEOF([key_serial_t],,[
|
|
#ifdef HAVE_INTTYPES_H
|
|
#include <inttypes.h>
|
|
#endif
|
|
#ifdef HAVE_SYS_TYPES_H
|
|
#include <sys/types.h>
|
|
#endif
|
|
#include <keyutils.h>
|
|
])
|
|
fi
|
|
|
|
AC_FIND_FUNC_NO_LIBS(add_key, keyutils)
|
|
if test -n "$LIB_add_key"; then
|
|
saved_LIBS="$LIBS"
|
|
LIBS="$LIBS $LIB_add_key"
|
|
AC_CHECK_FUNCS(keyctl_get_persistent)
|
|
LIBS="$saved_LIBS"
|
|
fi
|
|
|
|
AC_CHECK_SIZEOF([time_t])
|
|
|
|
dnl Cray stuff
|
|
AC_CHECK_FUNCS(getudbnam setlim)
|
|
|
|
dnl AC_KRB_FUNC_GETCWD_BROKEN
|
|
|
|
AC_CHECK_TYPES([int8_t, int16_t, int32_t, int64_t,
|
|
u_int8_t, u_int16_t, u_int32_t, u_int64_t,
|
|
uint8_t, uint16_t, uint32_t, uint64_t],,,[
|
|
#ifdef HAVE_INTTYPES_H
|
|
#include <inttypes.h>
|
|
#endif
|
|
#ifdef HAVE_SYS_TYPES_H
|
|
#include <sys/types.h>
|
|
#endif
|
|
#ifdef HAVE_SYS_BITYPES_H
|
|
#include <sys/bitypes.h>
|
|
#endif
|
|
#ifdef HAVE_BIND_BITYPES_H
|
|
#include <bind/bitypes.h>
|
|
#endif
|
|
#ifdef HAVE_NETINET_IN6_MACHTYPES_H
|
|
#include <netinet/in6_machtypes.h>
|
|
#endif
|
|
])
|
|
|
|
rk_FRAMEWORK_SECURITY
|
|
rk_FRAMEWORK_COREFOUNDATION
|
|
|
|
KRB_READLINE
|
|
|
|
rk_TELNET
|
|
|
|
dnl Some operating systems already have com_err and compile_et
|
|
CHECK_COMPILE_ET
|
|
|
|
rk_AUTH_MODULES([sia afskauthlib])
|
|
|
|
rk_DESTDIRS
|
|
|
|
rk_WFLAGS([-Wall -Wmissing-prototypes -Wpointer-arith -Wbad-function-cast -Wmissing-declarations -Wnested-externs])
|
|
|
|
|
|
AH_BOTTOM([#ifdef __APPLE__
|
|
#include <AvailabilityMacros.h>
|
|
#endif])
|
|
|
|
AH_BOTTOM([#ifdef ROKEN_RENAME
|
|
#include "roken_rename.h"
|
|
#endif])
|
|
|
|
AC_ARG_ENABLE(heimdal-documentation,
|
|
AS_HELP_STRING([--disable-heimdal-documentation],
|
|
[if you want disable to heimdal documentation]))
|
|
AM_CONDITIONAL(HEIMDAL_DOCUMENTATION, test "$enable_heimdal_documentation" != no)
|
|
|
|
AC_CONFIG_FILES(Makefile \
|
|
etc/Makefile \
|
|
include/Makefile \
|
|
include/gssapi/Makefile \
|
|
include/hcrypto/Makefile \
|
|
include/kadm5/Makefile \
|
|
lib/Makefile \
|
|
lib/base/Makefile \
|
|
lib/asn1/Makefile \
|
|
lib/com_err/Makefile \
|
|
lib/hcrypto/Makefile \
|
|
lib/hx509/Makefile \
|
|
lib/gssapi/Makefile \
|
|
lib/ntlm/Makefile \
|
|
lib/hdb/Makefile \
|
|
lib/ipc/Makefile \
|
|
lib/kadm5/Makefile \
|
|
lib/kafs/Makefile \
|
|
lib/kdfs/Makefile \
|
|
lib/krb5/Makefile \
|
|
lib/otp/Makefile \
|
|
lib/roken/Makefile \
|
|
lib/sl/Makefile \
|
|
lib/sqlite/Makefile \
|
|
lib/vers/Makefile \
|
|
lib/wind/Makefile \
|
|
po/Makefile \
|
|
kuser/Makefile \
|
|
kpasswd/Makefile \
|
|
kadmin/Makefile \
|
|
admin/Makefile \
|
|
kcm/Makefile \
|
|
kdc/Makefile \
|
|
appl/Makefile \
|
|
appl/afsutil/Makefile \
|
|
appl/dbutils/Makefile \
|
|
appl/gssmask/Makefile \
|
|
appl/otp/Makefile \
|
|
appl/test/Makefile \
|
|
appl/kf/Makefile \
|
|
appl/dceutils/Makefile \
|
|
tests/Makefile \
|
|
tests/bin/Makefile \
|
|
tests/can/Makefile \
|
|
tests/db/Makefile \
|
|
tests/kdc/Makefile \
|
|
tests/ldap/Makefile \
|
|
tests/gss/Makefile \
|
|
tests/java/Makefile \
|
|
tests/plugin/Makefile \
|
|
packages/Makefile \
|
|
packages/mac/Makefile \
|
|
doc/Makefile \
|
|
tools/Makefile \
|
|
)
|
|
|
|
AC_OUTPUT
|
|
|
|
dnl
|
|
dnl This is the release version name-number[beta]
|
|
dnl
|
|
|
|
if test -d "$srcdir/.git"; then
|
|
cat > include/newversion.h.in <<EOF
|
|
#ifndef VERSION_HIDDEN
|
|
#define VERSION_HIDDEN
|
|
#endif
|
|
VERSION_HIDDEN const char *heimdal_long_version = "@([#])\$Version: $PACKAGE_STRING by @USER@ on @HOST@ @BRANCH@ @TAG@ ($host) @COMMIT@ @DATE@ \$";
|
|
VERSION_HIDDEN const char *heimdal_version = "AC_PACKAGE_STRING";
|
|
EOF
|
|
else
|
|
cat > include/newversion.h.in <<EOF
|
|
#ifndef VERSION_HIDDEN
|
|
#define VERSION_HIDDEN
|
|
#endif
|
|
VERSION_HIDDEN const char *heimdal_long_version = "@([#])\$Version: $PACKAGE_STRING by @USER@ on @HOST@ ($host) @DATE@ \$";
|
|
VERSION_HIDDEN const char *heimdal_version = "AC_PACKAGE_STRING";
|
|
EOF
|
|
fi
|
|
|
|
if test -f include/version.h && cmp -s include/newversion.h.in include/version.h.in; then
|
|
echo "include/version.h is unchanged"
|
|
rm -f include/newversion.h.in
|
|
else
|
|
echo "creating include/version.h"
|
|
if test -n "$SOURCE_DATE_EPOCH"; then
|
|
Date=`
|
|
# BSD, OS X
|
|
date -u -r "$SOURCE_DATE_EPOCH" "+%Y-%m-%dT%H:%M:%SZ" 2>/dev/null ||
|
|
# Linux
|
|
date -u -d "@${SOURCE_DATE_EPOCH}" 2>/dev/null ||
|
|
# Illumos -- sorry, no -r/-d here
|
|
date -u ||
|
|
date`
|
|
else
|
|
Date=`date -u "+%Y-%m-%dT%H:%M:%SZ"`
|
|
fi
|
|
if test -n "$SOURCE_HOST"; then
|
|
Host=$SOURCE_HOST
|
|
else
|
|
Host=`uname -n`
|
|
fi
|
|
if test -n "$SOURCE_USER"; then
|
|
User=$SOURCE_USER
|
|
else
|
|
User=${USER:-${LOGNAME:-`id -nu`}}
|
|
fi
|
|
if test -d "$srcdir/.git"; then
|
|
GitCommit=`cd $srcdir && git rev-parse HEAD`
|
|
GitBranch=`cd $srcdir && git rev-parse --abbrev-ref HEAD`
|
|
if test "x$GitBranch" = master; then
|
|
GitDesc=`cd $srcdir && git describe --all --dirty`
|
|
else
|
|
GitDesc=`cd $srcdir && \
|
|
git describe --tags --match 'heimdal-*' --dirty`
|
|
fi
|
|
else
|
|
GitCommit='<commit-unknown>'
|
|
GitBranch='<branch-unknown>'
|
|
GitDesc='<tag-unknown>'
|
|
fi
|
|
mv -f include/newversion.h.in include/version.h.in
|
|
sed -e "s/@HOST@/$Host/" \
|
|
-e "s;@USER@;$User;" \
|
|
-e "s;@DATE@;$Date;" \
|
|
-e "s;@BRANCH@;$GitBranch;" \
|
|
-e "s;@TAG@;$GitDesc;" \
|
|
-e "s;@COMMIT@;$GitCommit;" \
|
|
include/version.h.in > include/version.h
|
|
fi
|