-dnl ###############
-dnl ## Libraries ##
-dnl ###############
-if test -z "$ac_krb5_disable" ; then
- AC_CHECK_LIB(krb5, krb5_get_in_tkt_with_password, [
- ac_krb5="yes"
- ac_krbdefs="-DKRB5"
- ac_krblibs="-lkrb5"
- AC_CHECK_LIB(k5crypto, krb5_string_to_key, [
- ac_krblibs="$ac_krblibs -lk5crypto"
- ], [
- AC_CHECK_LIB(crypto, krb5_string_to_key, [
- ac_krblibs="$ac_krblibs -lcrypto"
- ], [
- ac_krblibs=""
- ], "-lcom_err")
- ], "-lcom_err")
- ac_krblibs="$ac_krblibs -lcom_err"
-
- if test -z "$ac_krb4_disable" ; then
- if test -n "$ac_krblibs" ; then
- AC_CHECK_LIB(krb4, krb_get_pw_in_tkt, [
- ac_krb4="yes"
- ac_krbdefs="$ac_krbdefs -DKRB4"
- ac_krblibs="$ac_krblibs -lkrb4 $ac_krblibs"
- ],, $ac_krblibs)
- fi
- fi
- ],, "-lcom_err")
-fi
-
-if test -z "$ac_krb4_disable" -a -z "$ac_krb4" ; then
- AC_CHECK_LIB(krb, krb_get_pw_in_tkt, [
- ac_krb4="yes"
- ac_krbdefs="-DKRB4"
- ac_krblibs="$ac_krblibs -lkrb -lcom_err"
- ],, "-lcom_err")
-fi
-
-if test -z "$ac_krb4" -a -z "$ac_krb5" ; then
- AC_ERROR(Neither Kerberos 5 nor 4 support available.)
+AC_ARG_WITH(krb5,
+ AC_HELP_STRING([--with-krb5=dir],[use krb5 in dir]),
+ [ with_krb5="$withval" ])
+
+if test "x$with_krb5" != "xno" ; then
+ ac_save_CPPFLAGS="$CPPFLAGS"
+ ac_save_LDFLAGS="$LDFLAGS"
+ ac_save_LIBS="$LIBS"
+
+ if test -n "$with_krb5"; then
+ if test -x "$with_krb5/bin/krb5-config"; then
+ krb5_config_command="$with_krb5/bin/krb5-config"
+ else
+ krb5_config_command=""
+ fi
+ fi
+
+ dnl
+ dnl find header files
+ dnl
+
+ if test -z "$KRB5_CPPFLAGS"; then
+ TMP_KRB5_CPPFLAGS=""
+ if test -n "$krb5_config_command"; then
+ TMP_KRB5_CPPFLAGS=`$krb5_config_command --cflags gssapi 2>/dev/null`
+ fi
+ if test -z "$TMP_KRB5_CPPFLAGS"; then
+ TMP_KRB5_CPPFLAGS="-I$with_krb5/include"
+ fi
+ CPPFLAGS="$CPPFLAGS $TMP_KRB5_CPPFLAGS"
+ AC_CHECK_HEADERS(gssapi.h,
+ [ KRB5_CPPFLAGS="$TMP_KRB5_CPPFLAGS" ])
+ if test -z "$KRB5_CPPFLAGS"; then
+ AC_CHECK_HEADERS(gssapi/gssapi.h,
+ [ KRB5_CPPFLAGS="$TMP_KRB5_CPPFLAGS" ])
+ fi
+ CPPFLAGS="$ac_save_CPPFLAGS"
+ fi
+
+ dnl
+ dnl find libraries
+ dnl
+
+ if test -z "$KRB5_LDFLAGS" -a -n "$krb5_config_command"; then
+ TMP_KRB5_LDFLAGS=`$krb5_config_command --libs gssapi 2>/dev/null`
+ if test -n "$TMP_KRB5_LDFLAGS"; then
+ LIBS="$LIBS $TMP_KRB5_LDFLAGS $LIB_resolv"
+ AC_CHECK_LIB(krb5, krb5_init_context,
+ [ KRB5_LDFLAGS="$TMP_KRB5_LDFLAGS" ])
+ LIBS="$ac_save_LIBS"
+ fi
+ fi
+
+ if test -z "$KRB5_LDFLAGS"; then
+ #try MIT
+ TMP_KRB5_LDFLAGS="-L$with_krb5/lib -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err"
+ LIBS="$LIBS $TMP_KRB5_LDFLAGS $LIB_resolv"
+ AC_CHECK_LIB(krb5, krb5_init_context, [ KRB5_LDFLAGS="$TMP_KRB5_LDFLAGS" ])
+ LIBS="$ac_save_LIBS"
+ fi
+
+ if test -z "$KRB5_LDFLAGS"; then
+ #Try Heimdal
+ TMP_KRB5_LDFLAGS="-L$with_krb5/lib -lgssapi -lkrb5 -lasn1 -lcrypto -lroken -lcrypt"
+ LIBS="$LIBS $TMP_KRB5_LDFLAGS $LIB_resolv"
+ AC_CHECK_LIB(krb5, krb5_init_context, [ KRB5_LDFLAGS="$TMP_KRB5_LDFLAGS" ])
+ LIBS="$ac_save_LIBS"
+ fi
+
+ if test -z "$KRB5_LDFLAGS"; then
+ #Try Heimdal on OpenBSD
+ TMP_KRB5_LDFLAGS="-L$with_krb5/lib -lgssapi -lkrb5 -lasn1 -ldes -lcrypto"
+ LIBS="$LIBS $TMP_KRB5_LDFLAGS $LIB_resolv"
+ AC_CHECK_LIB(krb5, krb5_init_context, [ KRB5_LDFLAGS="$TMP_KRB5_LDFLAGS" ])
+ LIBS="$ac_save_LIBS"
+ fi
+
+ if test -z "$KRB5_LDFLAGS"; then
+ with_krb5=no
+ else
+ with_krb5=yes
+ AC_DEFINE(KRB5)
+
+ # check for Heimdal
+ have_heimdal=""
+ AC_MSG_CHECKING(whether we are using Heimdal)
+ ac_save_CFLAGS="$CFLAGS"
+ CFLAGS="$KRB5_CPPFLAGS"
+ AC_TRY_COMPILE([#include <krb5.h>],
+ [ char *tmp = heimdal_version; ],
+ [ AC_MSG_RESULT(yes)
+ AC_DEFINE(HEIMDAL) ]
+ have_heimdal=yes,
+ [ AC_MSG_RESULT(no) ])
+ CFLAGS="$ac_save_CFLAGS"
+
+ if test -n "$have_heimdal"; then
+ SPNEGO_SRCS="\
+ spnegokrb5/asn1_MechType.c \
+ spnegokrb5/asn1_MechTypeList.c \
+ spnegokrb5/asn1_ContextFlags.c \
+ spnegokrb5/asn1_NegTokenInit.c \
+ spnegokrb5/asn1_NegTokenTarg.c \
+ spnegokrb5/init_sec_context.c \
+ spnegokrb5/accept_sec_context.c \
+ spnegokrb5/encapsulate.c \
+ spnegokrb5/decapsulate.c \
+ spnegokrb5/external.c"
+ else
+ SPNEGO_SRCS="\
+ spnegokrb5/asn1_MechType.c \
+ spnegokrb5/asn1_MechTypeList.c \
+ spnegokrb5/asn1_ContextFlags.c \
+ spnegokrb5/asn1_NegTokenInit.c \
+ spnegokrb5/asn1_NegTokenTarg.c \
+ spnegokrb5/der_get.c \
+ spnegokrb5/der_put.c \
+ spnegokrb5/der_free.c \
+ spnegokrb5/der_length.c \
+ spnegokrb5/der_copy.c \
+ spnegokrb5/timegm.c \
+ spnegokrb5/init_sec_context.c \
+ spnegokrb5/accept_sec_context.c \
+ spnegokrb5/encapsulate.c \
+ spnegokrb5/decapsulate.c \
+ spnegokrb5/external.c"
+ fi
+ fi