.include <src.opts.mk>
.include "${SRCTOP}/secure/ssh.mk"
PROG= sshd-auth
SRCS= sshd-auth.c \
auth2-methods.c \
auth-rhosts.c auth-passwd.c sshpty.c sshlogin.c servconf.c \
serverloop.c auth.c auth2.c auth-options.c session.c auth2-chall.c \
groupaccess.c auth-bsdauth.c auth2-hostbased.c auth2-kbdint.c \
auth2-none.c auth2-passwd.c auth2-pubkey.c auth2-pubkeyfile.c \
auth2-gss.c gss-serv.c gss-serv-krb5.c \
monitor_wrap.c auth-krb5.c \
audit.c audit-bsm.c audit-linux.c platform.c \
loginrec.c auth-pam.c auth-shadow.c auth-sia.c \
sandbox-null.c sandbox-rlimit.c sandbox-darwin.c \
sandbox-seccomp-filter.c sandbox-capsicum.c sandbox-solaris.c \
sftp-server.c sftp-common.c \
uidswap.c $(SKSRCS)
PACKAGE= ssh
# gss-genr.c really belongs in libssh; see src/secure/lib/libssh/Makefile
SRCS+= gss-genr.c
MAN=
# pam should always happen before ssh here for static linking
LIBADD= pam ssh util
.if ${MK_AUDIT} != "no"
CFLAGS+= -DUSE_BSM_AUDIT=1 -DHAVE_GETAUDIT_ADDR=1
LIBADD+= bsm
.endif
.if ${MK_BLOCKLIST_SUPPORT} != "no"
CFLAGS+= -DUSE_BLOCKLIST=1 -I${SRCTOP}/contrib/blocklist/include
SRCS+= blocklist.c
LIBADD+= blocklist
LDFLAGS+=-L${LIBBLOCKLISTDIR}
.endif
.if ${MK_KERBEROS_SUPPORT} != "no"
.if ${MK_MITKRB5} != "no"
LIBADD+= gssapi_krb5 krb5
.include "../../krb5/Makefile.inc"
CFLAGS+= -I${KRB5_DIR}/include \
-I${KRB5_SRCTOP}/include \
-I${KRB5_OBJTOP}/lib
.else
LIBADD+= gssapi_krb5 gssapi krb5
.endif
.endif
LIBADD+= crypto
.include <bsd.prog.mk>
.PATH: ${SSHDIR}
