Index: /branches/rel_apv_10_4_0_112_sbi/usr/click/bin/openssh/array_patch
===================================================================
--- /branches/rel_apv_10_4_0_112_sbi/usr/click/bin/openssh/array_patch	(revision 38028)
+++ /branches/rel_apv_10_4_0_112_sbi/usr/click/bin/openssh/array_patch	(working copy)
@@ -46,7 +46,7 @@
  
  sshd$(EXEEXT): libssh.a	$(LIBCOMPAT) $(SSHDOBJS)
 -	$(LD) -o $@ $(SSHDOBJS) $(LDFLAGS) -lssh -lopenbsd-compat $(SSHDLIBS) $(LIBS) $(GSSLIBS) $(K5LIBS)
-+	$(LD) -o $@ $(SSHDOBJS) $(LDFLAGS) -lssh -lopenbsd-compat $(SSHDLIBS) $(LIBS) $(GSSLIBS) $(K5LIBS)  -L ../../objdir/ -L../../../lib/libexauth -lexauth -L../../../lib/libfastlog -lfastlog
++	$(LD) -o $@ $(SSHDOBJS) $(LDFLAGS) -lssh -lldap -lopenbsd-compat $(SSHDLIBS) $(LIBS) $(GSSLIBS) $(K5LIBS)  -L ../../objdir/ -L../../../lib/libexauth -lexauth -L../../../lib/libfastlog -lfastlog
 +
 +synconfigd$(EXEEXT): sshd$(EXEEXT)
 +	/bin/cp sshd$(EXEEXT) $@
Index: /branches/rel_apv_10_4_0_112_sbi/usr/click/lib/libexauth/Makefile
===================================================================
--- /branches/rel_apv_10_4_0_112_sbi/usr/click/lib/libexauth/Makefile	(revision 38028)
+++ /branches/rel_apv_10_4_0_112_sbi/usr/click/lib/libexauth/Makefile	(working copy)
@@ -5,10 +5,14 @@
 INCS=	auth_ext.h auth_ext_cli.h auth_ext_ipc.h radlib.h taclib.h
 
 CFLAGS+=-I${.CURDIR} \
-	-I${.CURDIR}/../../lib/libfastlog
+	-I${.CURDIR}/../../lib/libfastlog \
+        -I${.CURDIR}/../../lib/libbsd
 
 .if defined(USTACK)
 CFLAGS += -fPIC
 .endif
 
-.include <bsd.lib.mk>
+LDADD=-L${.OBJDIR}/../../lib/libbsd -lbsd \
+      -lmd -lcrypt -lcrypto -lpthread -lldap -llber -lhiredis -lutil
+
+.include <bsd.libauth.mk>
Index: /branches/rel_apv_10_4_0_112_sbi/usr/click/lib/libexauth/auth_ext.h
===================================================================
--- /branches/rel_apv_10_4_0_112_sbi/usr/click/lib/libexauth/auth_ext.h	(revision 38028)
+++ /branches/rel_apv_10_4_0_112_sbi/usr/click/lib/libexauth/auth_ext.h	(working copy)
@@ -88,6 +88,8 @@
 
 /*authenticate with external radius server*/
 int external_auth(char *username, char *password);
+/*authenticate with external ldap server*/
+int external_auth_ldap(char *username, char *password);
 
 /*authenticate with external radius server*/
 int external_auth_radius(char *username, char *password);
Index: /branches/rel_apv_10_4_0_112_sbi/usr/click/lib/libexauth/auth_ext.c
===================================================================
--- /branches/rel_apv_10_4_0_112_sbi/usr/click/lib/libexauth/auth_ext.c	(revision 38028)
+++ /branches/rel_apv_10_4_0_112_sbi/usr/click/lib/libexauth/auth_ext.c	(working copy)
@@ -32,7 +32,7 @@
 #include <sys/ipc.h>
 #include <fastlog.h>
 #include <sys/shm.h>
-
+#include <ldap.h>
 #include "auth_ext.h"
 #include "auth_ext_cli.h"
 #include "auth_ext_ipc.h"
@@ -80,6 +80,9 @@
 	if (g_exauth_conf.exau_method == METHOD_TAC_X) {
 		sprintf(buf, "%s", EXAUTH_METHOD_STRING_TAC_X);
 	}
+        if (g_exauth_conf.exau_method == METHOD_LDAP) {
+                sprintf(buf, "%s", EXAUTH_METHOD_STRING_LDAP);
+        }
 
 	return 0;
 }
@@ -170,6 +173,9 @@
 		case METHOD_TAC_X:
 			return external_auth_tacx(username, password);
 			break;
+                case METHOD_LDAP:
+                        return external_auth_ldap(username, password);
+                        break;
 
 		default:
 			exau_log("external_auth: no authenticaion method found");
@@ -181,6 +187,83 @@
 
 }
 
+int
+external_auth_ldap(char *username, char *password)
+{
+    /*the return value of radius response type*/
+    int ret_value = EXT_AUTH_FAILED;
+    int i;
+
+    if (username == NULL || password == NULL) {
+        return EXT_AUTH_FAILED;
+    }
+
+
+    /*authenticate ldap servers*/
+    for (i = 0; i < MAX_EXAU_SERVER_NUM; i++) {
+        if (g_exauth_conf.exauth_servers[i].id &&
+            g_exauth_conf.exauth_servers[i].id[0] != '\0') {
+            ret_value = external_auth_one_ldap(i, username, password);
+            if ((ret_value == EXT_AUTH_PASS_CONFIG) ||
+                (ret_value == EXT_AUTH_PASS_ENABLE)) {
+                break;
+            }
+        }
+    }
+
+    return ret_value;
+}
+
+int
+external_auth_one_ldap(int server_num, char *username, char *password)
+{
+    LDAP *ldap;
+    struct timeval to;
+    int ldap_version = LDAP_VERSION3;
+    int msgid = 0;
+    to.tv_sec = 600;
+    to.tv_usec = 0;
+    int ret_value = EXT_AUTH_FAILED;
+    int i = server_num;
+    if (username == NULL || password == NULL) {
+            return EXT_AUTH_FAILED;
+    }
+    char ldap_uri[1024];
+    sprintf(ldap_uri,"ldap://%s:%d",g_exauth_conf.exauth_servers[i].host,
+                                   g_exauth_conf.exauth_servers[i].port);
+    if ( ldap_initialize(&ldap, ldap_uri)  != LDAP_SUCCESS ) {
+        exau_log( "ldap_init failed" );
+        return ret_value;
+    } else {
+        exau_log("Generated LDAP handle for uri %s.\n", ldap_uri);
+    }
+
+
+    if (ldap_set_option(ldap, LDAP_OPT_TIMEOUT,&to) != LDAP_SUCCESS ) {
+        return ret_value;
+    }
+
+    if (ldap_set_option(ldap, LDAP_OPT_NETWORK_TIMEOUT,&to) != LDAP_SUCCESS ) {
+        return ret_value;
+    }
+
+    if (ldap_set_option(ldap, LDAP_OPT_PROTOCOL_VERSION, &ldap_version) != LDAP_SUCCESS ) {
+        return ret_value;
+    }
+
+    msgid = ldap_simple_bind_s(ldap, username, password);
+
+    if ( msgid != LDAP_SUCCESS ) {
+        exau_log("LDAP login failed for user %s.\n", username);
+        return ret_value;
+    } else {
+        exau_log("LDAP login successful for user %s.\n", username);
+        ret_value = EXT_AUTH_PASS_CONFIG;
+    }
+    ldap_unbind_ext_s(ldap, NULL, NULL);
+    return ret_value;
+}
+
 /*authenticate with external radius server*/
 /*To support ipv6 auth server, we modified the libradius library to support ipv6 too.
   This library can handle up to 10 auth servers in one auth request, when we originate
@@ -322,7 +405,7 @@
 int
 external_auth_radius(char *username, char *password)
 {
-	/*the return value of radius response type*/
+	/*the return value of ldap response type*/
 	int ret_value = EXT_AUTH_FAILED;
 	int i;
 
Index: /branches/rel_apv_10_4_0_112_sbi/usr/click/lib/libexauth/auth_ext_cli.h
===================================================================
--- /branches/rel_apv_10_4_0_112_sbi/usr/click/lib/libexauth/auth_ext_cli.h	(revision 38028)
+++ /branches/rel_apv_10_4_0_112_sbi/usr/click/lib/libexauth/auth_ext_cli.h	(working copy)
@@ -41,6 +41,7 @@
 
 #define EXAUTH_METHOD_STRING_RADIUS		"RADIUS"
 #define EXAUTH_METHOD_STRING_TAC_X		"TAC_X"
+#define EXAUTH_METHOD_STRING_LDAP               "LDAP"
 #define EXAUTH_METHOD_STRING_UNKONWN	"UNKONWN METHOD"
 
 #define EXAUTH_PRIORITY_HIGH		1
@@ -49,7 +50,8 @@
 /*authentication method table*/
 typedef enum exau_method {
 	METHOD_RADIUS,
-	METHOD_TAC_X
+	METHOD_TAC_X,
+        METHOD_LDAP
 } enum_exau_method;
 
 /*the structure for radius server*/
Index: /branches/rel_apv_10_4_0_112_sbi/usr/src/share/mk/bsd.libauth.mk
===================================================================
--- /branches/rel_apv_10_4_0_112_sbi/usr/src/share/mk/bsd.libauth.mk	(revision 0)
+++ /branches/rel_apv_10_4_0_112_sbi/usr/src/share/mk/bsd.libauth.mk	(working copy)
@@ -0,0 +1,496 @@
+#	from: @(#)bsd.lib.mk	5.26 (Berkeley) 5/2/91
+# $FreeBSD$
+#
+
+.include <bsd.init.mk>
+INSTALLFLAGS+=-D
+.if defined(USTACK)
+BSD_SYS_INC:= \
+	-I${.CURDIR}/../../../sys/include \
+	-I${.CURDIR}/../../../src/sys
+.for inc in ${BSD_SYS_INC}
+CFLAGS:= ${CFLAGS:S/${inc}//g}
+.endfor
+
+.if !defined(NO_USR_INC)
+CFLAGS+=-I${.CURDIR}/../../include
+.endif
+
+CFLAGS+=-g \
+        -I${RTE_SDK}/${RTE_TARGET}/include \
+        -I${.CURDIR}/../../include \
+        -I${.CURDIR}/../../lib/libuinet-atcp/lib/libuinet_sysctl \
+        -I${.CURDIR}/../../lib/libuinet-atcp/lib/libuinet/api_include \
+	-I${.CURDIR}/../../lib/libuinet-atcp/lib/libuinet/machine_include \
+	-I${.CURDIR}/../../lib/libuinet-atcp/lib/libuinet_sysctl
+#remove the not-yet support libs
+LDLIB_NOT_YET_SUPPORT_BY_USTACK= \
+        /usr/local/lib/libprotobuf.a \
+        /usr/local/lib/libldap.a \
+        /usr/local/lib/liblber.a \
+        /usr/local/lib/libiconv.a \
+        /usr/local/lib/librrd.a \
+        -lgeom \
+        -lkvm \
+        -lmd \
+        -lmemstat \
+        -lradius \
+        -ltacplus
+.for lib in ${LDLIB_NOT_YET_SUPPORT_BY_USTACK}
+LDADD:= ${LDADD:S/${lib}//g}
+.endfor
+.endif
+
+# Set up the variables controlling shared libraries.  After this section,
+# SHLIB_NAME will be defined only if we are to create a shared library.
+# SHLIB_LINK will be defined only if we are to create a link to it.
+# INSTALL_PIC_ARCHIVE will be defined only if we are to create a PIC archive.
+.if defined(NO_PIC)
+.undef SHLIB_NAME
+.undef INSTALL_PIC_ARCHIVE
+.else
+.if !defined(SHLIB) && defined(LIB)
+SHLIB=		${LIB}
+.endif
+.if !defined(SHLIB_NAME) && defined(SHLIB) && defined(SHLIB_MAJOR)
+SHLIB_NAME=	lib${SHLIB}.so.${SHLIB_MAJOR}
+.endif
+.if defined(SHLIB_NAME) && !empty(SHLIB_NAME:M*.so.*)
+SHLIB_LINK?=	${SHLIB_NAME:R}
+.endif
+SONAME?=	${SHLIB_NAME}
+.endif
+
+.if defined(CRUNCH_CFLAGS)
+CFLAGS+=	${CRUNCH_CFLAGS}
+.endif
+
+.if ${MK_ASSERT_DEBUG} == "no"
+CFLAGS+= -DNDEBUG
+NO_WERROR=
+.endif
+
+.if defined(DEBUG_FLAGS)
+CFLAGS+= ${DEBUG_FLAGS}
+
+.if ${MK_CTF} != "no" && ${DEBUG_FLAGS:M-g} != ""
+CTFFLAGS+= -g
+.endif
+.else
+STRIP?=	-s
+.endif
+
+.if ${MK_DEBUG_FILES} != "no" && empty(DEBUG_FLAGS:M-g) && \
+    empty(DEBUG_FLAGS:M-gdwarf*)
+CFLAGS+= -g
+CTFFLAGS+= -g
+.endif
+
+.include <bsd.libnames.mk>
+
+# prefer .s to a .c, add .po, remove stuff not used in the BSD libraries
+# .So used for PIC object files
+.SUFFIXES:
+.SUFFIXES: .out .o .po .So .S .asm .s .c .cc .cpp .cxx .C .f .y .l .ln
+
+.if !defined(PICFLAG)
+.if ${MACHINE_CPUARCH} == "sparc64"
+PICFLAG=-fPIC
+.else
+PICFLAG=-fpic
+.endif
+.endif
+
+PO_FLAG=-pg
+
+.c.o:
+	${CC} ${STATIC_CFLAGS} ${CFLAGS} -c ${.IMPSRC} -o ${.TARGET} ${LDADD}
+	${CTFCONVERT_CMD}
+
+.c.po:
+	${CC} ${PO_FLAG} ${STATIC_CFLAGS} ${PO_CFLAGS} -c ${.IMPSRC} -o ${.TARGET}
+	${CTFCONVERT_CMD}
+
+.c.So:
+	${CC} ${PICFLAG} -DPIC ${SHARED_CFLAGS} ${CFLAGS} -c ${.IMPSRC} -o ${.TARGET} ${LDADD}
+	${CTFCONVERT_CMD}
+
+.cc.o .C.o .cpp.o .cxx.o:
+	${CXX} ${STATIC_CXXFLAGS} ${CXXFLAGS} -c ${.IMPSRC} -o ${.TARGET}
+
+.cc.po .C.po .cpp.po .cxx.po:
+	${CXX} ${PO_FLAG} ${STATIC_CXXFLAGS} ${PO_CXXFLAGS} -c ${.IMPSRC} -o ${.TARGET}
+
+.cc.So .C.So .cpp.So .cxx.So:
+	${CXX} ${PICFLAG} -DPIC ${SHARED_CXXFLAGS} ${CXXFLAGS} -c ${.IMPSRC} -o ${.TARGET}
+
+.f.po:
+	${FC} -pg ${FFLAGS} -o ${.TARGET} -c ${.IMPSRC}
+	${CTFCONVERT_CMD}
+
+.f.So:
+	${FC} ${PICFLAG} -DPIC ${FFLAGS} -o ${.TARGET} -c ${.IMPSRC}
+	${CTFCONVERT_CMD}
+
+.s.po .s.So:
+	${AS} ${AFLAGS} -o ${.TARGET} ${.IMPSRC}
+	${CTFCONVERT_CMD}
+
+.asm.po:
+	${CC} -x assembler-with-cpp -DPROF ${PO_CFLAGS} ${ACFLAGS} \
+		-c ${.IMPSRC} -o ${.TARGET}
+	${CTFCONVERT_CMD}
+
+.asm.So:
+	${CC} -x assembler-with-cpp ${PICFLAG} -DPIC ${CFLAGS} ${ACFLAGS} ${LDADD} \
+	    -c ${.IMPSRC} -o ${.TARGET}
+	${CTFCONVERT_CMD}
+
+.S.po:
+	${CC} -DPROF ${PO_CFLAGS} ${ACFLAGS} -c ${.IMPSRC} -o ${.TARGET}
+	${CTFCONVERT_CMD}
+
+.S.So:
+	${CC} ${PICFLAG} -DPIC ${CFLAGS} ${ACFLAGS} -c ${.IMPSRC} -o ${.TARGET} ${LDADD}
+	${CTFCONVERT_CMD}
+
+all: beforebuild .WAIT
+beforebuild: objwarn
+
+.if defined(PRIVATELIB)
+_LIBDIR:=${LIBPRIVATEDIR}
+_SHLIBDIR:=${LIBPRIVATEDIR}
+.else
+_LIBDIR:=${LIBDIR}
+_SHLIBDIR:=${SHLIBDIR}
+.endif
+
+.if defined(SHLIB_NAME)
+.if ${MK_DEBUG_FILES} != "no"
+SHLIB_NAME_FULL=${SHLIB_NAME}.full
+# Use ${DEBUGDIR} for base system debug files, else .debug subdirectory
+.if ${_SHLIBDIR} == "/boot" ||\
+    ${SHLIBDIR:C%/lib(/.*)?$%/lib%} == "/lib" ||\
+    ${SHLIBDIR:C%/usr/lib(32)?(/.*)?%/usr/lib%} == "/usr/lib"
+DEBUGFILEDIR=${DEBUGDIR}${_SHLIBDIR}
+.else
+DEBUGFILEDIR=${_SHLIBDIR}/.debug
+DEBUGMKDIR=
+.endif
+.else
+SHLIB_NAME_FULL=${SHLIB_NAME}
+.endif
+.endif
+
+.include <bsd.symver.mk>
+
+# Allow libraries to specify their own version map or have it
+# automatically generated (see bsd.symver.mk above).
+.if ${MK_SYMVER} == "yes" && !empty(VERSION_MAP)
+${SHLIB_NAME_FULL}:	${VERSION_MAP}
+LDFLAGS+=	-Wl,--version-script=${VERSION_MAP}
+.endif
+
+.if defined(USEPRIVATELIB)
+LDFLAGS+= -L${_SHLIBDIRPREFIX}${LIBPRIVATEDIR} -rpath ${LIBPRIVATEDIR}
+.endif
+
+.if defined(LIB) && !empty(LIB) || defined(SHLIB_NAME)
+OBJS+=		${SRCS:N*.h:R:S/$/.o/}
+.endif
+
+.if defined(LIB) && !empty(LIB)
+_LIBS=		lib${LIB}.a
+
+lib${LIB}.a: ${OBJS} ${STATICOBJS}
+	@${ECHO} building static ${LIB} library
+	@rm -f ${.TARGET}
+.if !defined(NM)
+	@${AR} ${ARFLAGS} ${.TARGET} `lorder ${OBJS} ${STATICOBJS} | tsort` ${ARADD}
+.else
+	@${AR} ${ARFLAGS} ${.TARGET} `NM='${NM}' lorder ${OBJS} ${STATICOBJS} | tsort` ${ARADD}
+.endif
+	${RANLIB} ${RANLIBFLAGS} ${.TARGET}
+.endif
+
+.if !defined(INTERNALLIB)
+
+.if ${MK_PROFILE} != "no" && defined(LIB) && !empty(LIB)
+_LIBS+=		lib${LIB}_p.a
+POBJS+=		${OBJS:.o=.po} ${STATICOBJS:.o=.po}
+
+lib${LIB}_p.a: ${POBJS}
+	@${ECHO} building profiled ${LIB} library
+	@rm -f ${.TARGET}
+.if !defined(NM)
+	@${AR} ${ARFLAGS} ${.TARGET} `lorder ${POBJS} | tsort` ${ARADD}
+.else
+	@${AR} ${ARFLAGS} ${.TARGET} `NM='${NM}' lorder ${POBJS} | tsort` ${ARADD}
+.endif
+	${RANLIB} ${RANLIBFLAGS} ${.TARGET}
+.endif
+
+.if defined(SHLIB_NAME) || \
+    defined(INSTALL_PIC_ARCHIVE) && defined(LIB) && !empty(LIB)
+SOBJS+=		${OBJS:.o=.So}
+.endif
+
+.if defined(SHLIB_NAME)
+_LIBS+=		${SHLIB_NAME}
+
+SOLINKOPTS=	-shared -Wl,-x
+.if !defined(ALLOW_SHARED_TEXTREL)
+SOLINKOPTS+=	-Wl,--fatal-warnings -Wl,--warn-shared-textrel
+.endif
+
+.if target(beforelinking)
+beforelinking: ${SOBJS}
+${SHLIB_NAME_FULL}: beforelinking
+.endif
+${SHLIB_NAME_FULL}: ${SOBJS}
+	@${ECHO} building shared library ${SHLIB_NAME}
+	@rm -f ${SHLIB_NAME} ${SHLIB_LINK}
+.if defined(SHLIB_LINK)
+	@${INSTALL_SYMLINK} ${SHLIB_NAME} ${SHLIB_LINK}
+.endif
+.if !defined(NM)
+	@${CC} ${LDFLAGS} ${SSP_CFLAGS} ${SOLINKOPTS} \
+	    -o ${.TARGET} -Wl,-soname,${SONAME} \
+	    `lorder ${SOBJS} | tsort` ${LDADD}
+.else
+	@${CC} ${LDFLAGS} ${SSP_CFLAGS} ${SOLINKOPTS} \
+	    -o ${.TARGET} -Wl,-soname,${SONAME} \
+	    `NM='${NM}' lorder ${SOBJS} | tsort` ${LDADD}
+.endif
+.if ${MK_CTF} != "no"
+	${CTFMERGE} ${CTFFLAGS} -o ${.TARGET} ${SOBJS}
+.endif
+
+.if ${MK_DEBUG_FILES} != "no"
+CLEANFILES+=	${SHLIB_NAME_FULL} ${SHLIB_NAME}.debug
+${SHLIB_NAME}: ${SHLIB_NAME_FULL} ${SHLIB_NAME}.debug
+	${OBJCOPY} --strip-debug --add-gnu-debuglink=${SHLIB_NAME}.debug \
+	    ${SHLIB_NAME_FULL} ${.TARGET}
+
+${SHLIB_NAME}.debug: ${SHLIB_NAME_FULL}
+	${OBJCOPY} --only-keep-debug ${SHLIB_NAME_FULL} ${.TARGET}
+.endif
+.endif #defined(SHLIB_NAME)
+
+.if defined(INSTALL_PIC_ARCHIVE) && defined(LIB) && !empty(LIB) && ${MK_TOOLCHAIN} != "no"
+_LIBS+=		lib${LIB}_pic.a
+
+lib${LIB}_pic.a: ${SOBJS}
+	@${ECHO} building special pic ${LIB} library
+	@rm -f ${.TARGET}
+	@${AR} ${ARFLAGS} ${.TARGET} ${SOBJS} ${ARADD}
+	${RANLIB} ${RANLIBFLAGS} ${.TARGET}
+.endif
+
+.if defined(WANT_LINT) && !defined(NO_LINT) && defined(LIB) && !empty(LIB)
+LINTLIB=	llib-l${LIB}.ln
+_LIBS+=		${LINTLIB}
+LINTOBJS+=	${SRCS:M*.c:.c=.ln}
+
+${LINTLIB}: ${LINTOBJS}
+	@${ECHO} building lint library ${.TARGET}
+	@rm -f ${.TARGET}
+	${LINT} ${LINTLIBFLAGS} ${CFLAGS:M-[DIU]*} ${.ALLSRC}
+.endif
+
+.endif # !defined(INTERNALLIB)
+
+all: ${_LIBS}
+
+.if ${MK_MAN} != "no"
+all: _manpages
+.endif
+
+_EXTRADEPEND:
+	@TMP=_depend$$$$; \
+	sed -e 's/^\([^\.]*\).o[ ]*:/\1.o \1.po \1.So:/' < ${DEPENDFILE} \
+	    > $$TMP; \
+	mv $$TMP ${DEPENDFILE}
+.if !defined(NO_EXTRADEPEND) && defined(SHLIB_NAME)
+.if defined(DPADD) && !empty(DPADD)
+	echo ${SHLIB_NAME}: ${DPADD} >> ${DEPENDFILE}
+.endif
+.endif
+
+.if !target(install)
+
+.if defined(PRECIOUSLIB)
+.if !defined(NO_FSCHG)
+SHLINSTALLFLAGS+= -fschg
+.endif
+SHLINSTALLFLAGS+= -S
+.endif
+
+_INSTALLFLAGS:=	${INSTALLFLAGS}
+.for ie in ${INSTALLFLAGS_EDIT}
+_INSTALLFLAGS:=	${_INSTALLFLAGS${ie}}
+.endfor
+_SHLINSTALLFLAGS:=	${SHLINSTALLFLAGS}
+.for ie in ${INSTALLFLAGS_EDIT}
+_SHLINSTALLFLAGS:=	${_SHLINSTALLFLAGS${ie}}
+.endfor
+
+.if !defined(INTERNALLIB)
+realinstall: _libinstall
+.ORDER: beforeinstall _libinstall
+_libinstall:
+.if defined(LIB) && !empty(LIB) && ${MK_INSTALLLIB} != "no"
+	${INSTALL} -C -o ${LIBOWN} -g ${LIBGRP} -m ${LIBMODE} \
+	    ${_INSTALLFLAGS} lib${LIB}.a ${DESTDIR}${_LIBDIR}
+.endif
+.if ${MK_PROFILE} != "no" && defined(LIB) && !empty(LIB)
+	${INSTALL} -C -o ${LIBOWN} -g ${LIBGRP} -m ${LIBMODE} \
+	    ${_INSTALLFLAGS} lib${LIB}_p.a ${DESTDIR}${_LIBDIR}
+.endif
+.if defined(SHLIB_NAME)
+	${INSTALL} ${STRIP} -o ${LIBOWN} -g ${LIBGRP} -m ${LIBMODE} \
+	    ${_INSTALLFLAGS} ${_SHLINSTALLFLAGS} \
+	    ${SHLIB_NAME} ${DESTDIR}${_SHLIBDIR}
+.if ${MK_DEBUG_FILES} != "no"
+.if defined(DEBUGMKDIR)
+	${INSTALL} -T debug -d ${DESTDIR}${DEBUGFILEDIR}
+.endif
+	${INSTALL} -T debug -o ${LIBOWN} -g ${LIBGRP} -m ${DEBUGMODE} \
+	    ${_INSTALLFLAGS} \
+	    ${SHLIB_NAME}.debug ${DESTDIR}${DEBUGFILEDIR}
+.endif
+.if defined(SHLIB_LINK)
+# ${_SHLIBDIRPREFIX} and ${_LDSCRIPTROOT} are both needed when cross-building
+# and when building 32 bits library shims.  ${_SHLIBDIRPREFIX} is the directory
+# prefix where shared objects will be installed by the install target.
+#
+# ${_LDSCRIPTROOT} is the directory prefix that will be used when generating
+# ld(1) scripts.  The crosstools' ld is configured to lookup libraries in an
+# alternative directory which is called "sysroot", so during buildworld binaries
+# won't be linked against the running system libraries but against the ones of
+# the current source tree.  ${_LDSCRIPTROOT} behavior is twisted because of
+# the location where we store them:
+# - 64 bits libs are located under sysroot, so ${_LDSCRIPTROOT} must be empty
+#   because ld(1) will manage to find them from sysroot;
+# - 32 bits shims are not, so ${_LDSCRIPTROOT} is used to specify their full
+#   path, outside of sysroot.
+# Note that ld(1) scripts are generated both during buildworld and
+# installworld; in the later case ${_LDSCRIPTROOT} must be obviously empty
+# because on the target system, libraries are meant to be looked up from /.
+.if defined(SHLIB_LDSCRIPT) && !empty(SHLIB_LDSCRIPT) && exists(${.CURDIR}/${SHLIB_LDSCRIPT})
+	sed -e 's,@@SHLIB@@,${_LDSCRIPTROOT}${_SHLIBDIR}/${SHLIB_NAME},g' \
+	    -e 's,@@LIBDIR@@,${_LDSCRIPTROOT}${_LIBDIR},g' \
+	    ${.CURDIR}/${SHLIB_LDSCRIPT} > ${DESTDIR}${_LIBDIR}/${SHLIB_LINK:R}.ld
+	${INSTALL} -S -C -o ${LIBOWN} -g ${LIBGRP} -m ${LIBMODE} \
+	    ${_INSTALLFLAGS} ${DESTDIR}${_LIBDIR}/${SHLIB_LINK:R}.ld \
+	    ${DESTDIR}${_LIBDIR}/${SHLIB_LINK}
+	rm -f ${DESTDIR}${_LIBDIR}/${SHLIB_LINK:R}.ld
+
+.else
+.if ${_SHLIBDIR} == ${_LIBDIR}
+	${INSTALL_SYMLINK} ${SHLIB_NAME} ${DESTDIR}${_LIBDIR}/${SHLIB_LINK}
+.else
+	${INSTALL_SYMLINK} ${_SHLIBDIRPREFIX}${_SHLIBDIR}/${SHLIB_NAME} \
+	    ${DESTDIR}${_LIBDIR}/${SHLIB_LINK}
+.if exists(${DESTDIR}${_LIBDIR}/${SHLIB_NAME})
+	-chflags noschg ${DESTDIR}${_LIBDIR}/${SHLIB_NAME}
+	rm -f ${DESTDIR}${_LIBDIR}/${SHLIB_NAME}
+.endif
+.endif
+.endif # SHLIB_LDSCRIPT
+.endif # SHLIB_LINK
+.endif # SHIB_NAME
+.if defined(INSTALL_PIC_ARCHIVE) && defined(LIB) && !empty(LIB) && ${MK_TOOLCHAIN} != "no"
+	${INSTALL} -o ${LIBOWN} -g ${LIBGRP} -m ${LIBMODE} \
+	    ${_INSTALLFLAGS} lib${LIB}_pic.a ${DESTDIR}${_LIBDIR}
+.endif
+.if defined(WANT_LINT) && !defined(NO_LINT) && defined(LIB) && !empty(LIB)
+	${INSTALL} -o ${LIBOWN} -g ${LIBGRP} -m ${LIBMODE} \
+	    ${_INSTALLFLAGS} ${LINTLIB} ${DESTDIR}${LINTLIBDIR}
+.endif
+.endif # !defined(INTERNALLIB)
+
+.if !defined(LIBRARIES_ONLY)
+.include <bsd.nls.mk>
+.include <bsd.files.mk>
+.include <bsd.incs.mk>
+.endif
+
+.include <bsd.links.mk>
+
+.if ${MK_MAN} != "no" && !defined(LIBRARIES_ONLY)
+realinstall: _maninstall
+.ORDER: beforeinstall _maninstall
+.endif
+
+.endif
+
+.if !target(lint)
+lint: ${SRCS:M*.c}
+	${LINT} ${LINTFLAGS} ${CFLAGS:M-[DIU]*} ${.ALLSRC}
+.endif
+
+.if ${MK_MAN} != "no" && !defined(LIBRARIES_ONLY)
+.include <bsd.man.mk>
+.endif
+
+.include <bsd.dep.mk>
+
+.if !exists(${.OBJDIR}/${DEPENDFILE})
+.if defined(LIB) && !empty(LIB)
+${OBJS} ${STATICOBJS} ${POBJS}: ${SRCS:M*.h}
+.for _S in ${SRCS:N*.[hly]}
+${_S:R}.po: ${_S}
+.endfor
+.endif
+.if defined(SHLIB_NAME) || \
+    defined(INSTALL_PIC_ARCHIVE) && defined(LIB) && !empty(LIB)
+${SOBJS}: ${SRCS:M*.h}
+.for _S in ${SRCS:N*.[hly]}
+${_S:R}.So: ${_S}
+.endfor
+.endif
+.endif
+
+.if !target(clean)
+clean:
+.if defined(CLEANFILES) && !empty(CLEANFILES)
+	rm -f ${CLEANFILES}
+.endif
+.if defined(LIB) && !empty(LIB)
+	rm -f a.out ${OBJS} ${OBJS:S/$/.tmp/} ${STATICOBJS}
+.endif
+.if !defined(INTERNALLIB)
+.if ${MK_PROFILE} != "no" && defined(LIB) && !empty(LIB)
+	rm -f ${POBJS} ${POBJS:S/$/.tmp/}
+.endif
+.if defined(SHLIB_NAME) || \
+    defined(INSTALL_PIC_ARCHIVE) && defined(LIB) && !empty(LIB)
+	rm -f ${SOBJS} ${SOBJS:.So=.so} ${SOBJS:S/$/.tmp/}
+.endif
+.if defined(SHLIB_NAME)
+.if defined(SHLIB_LINK)
+.if defined(SHLIB_LDSCRIPT) && exists(${.CURDIR}/${SHLIB_LDSCRIPT})
+	rm -f lib${LIB}.ld
+.endif
+	rm -f ${SHLIB_LINK}
+.endif
+.endif # defined(SHLIB_NAME)
+.if defined(WANT_LINT) && defined(LIB) && !empty(LIB)
+	rm -f ${LINTOBJS}
+.endif
+.endif # !defined(INTERNALLIB)
+.if defined(_LIBS) && !empty(_LIBS)
+	rm -f ${_LIBS}
+.endif
+.if defined(CLEANDIRS) && !empty(CLEANDIRS)
+	rm -rf ${CLEANDIRS}
+.endif
+.if !empty(VERSION_DEF) && !empty(SYMBOL_MAPS)
+	rm -f ${VERSION_MAP}
+.endif
+.endif
+
+.include <bsd.obj.mk>
+
+.include <bsd.sys.mk>