login.conf revision 42149
1288149Semaste# Sample login.conf - login class capabilities database. 2288149Semaste# To speed up access to this data, you can use /usr/bin/cap_mkdb 3288149Semaste# to create a database form of this file: 4288149Semaste# 5288149Semaste# cap_mkdb /etc/login.conf 6288149Semaste# 7288149Semaste# Don't forget to do this after each edit as well! 8288149Semaste# 9288149Semaste# This file controls resource limits, accounting limits and 10288149Semaste# default user environment settings. 11288149Semaste# 12288149Semaste# $Id: login.conf,v 1.23 1998/12/27 23:55:01 cwt Exp $ 13288149Semaste# 14288149Semaste 15288149Semaste# Default settings effectively disable resource limits, see the 16288149Semaste# examples below for a starting point to enable them. 17288149Semaste 18288149Semaste# defaults 19288149Semaste# These settings are used by login(1) by default for classless users 20288149Semaste# Note that entries like "cputime" set both "cputime-cur" and "cputime-max" 21288149Semaste 22288149Semastedefault:\ 23288149Semaste :copyright=/etc/COPYRIGHT:\ 24288149Semaste :welcome=/etc/motd:\ 25288149Semaste :setenv=MAIL=/var/mail/$,BLOCKSIZE=K,EDITOR=/usr/bin/ee:\ 26288149Semaste :path=~/bin /bin /usr/bin /usr/local/bin:\ 27288149Semaste :nologin=/etc/nologin:\ 28288149Semaste :cputime=unlimited:\ 29288149Semaste :datasize=unlimited:\ 30288149Semaste :stacksize=unlimited:\ 31288149Semaste :memorylocked=unlimited:\ 32288149Semaste :memoryuse=unlimited:\ 33288149Semaste :filesize=unlimited:\ 34288149Semaste :coredumpsize=unlimited:\ 35288149Semaste :openfiles=unlimited:\ 36288149Semaste :maxproc=unlimited:\ 37288149Semaste :priority=0:\ 38288149Semaste :ignoretime@:\ 39288149Semaste :umask=022: 40288149Semaste 41288149Semaste 42288149Semaste# 43288149Semaste# A collection of common class names - forward them all to 'default' 44288149Semaste# (login would normally do this anyway, but having a class name 45288149Semaste# here suppresses the diagnostic) 46288149Semaste# 47288149Semastestandard:\ 48288149Semaste :tc=default: 49288149Semastexuser:\ 50288149Semaste :tc=default: 51288149Semastestaff:\ 52288149Semaste :tc=default: 53288149Semastedaemon:\ 54288149Semaste :tc=default: 55288149Semastenews:\ 56288149Semaste :tc=default: 57288149Semastedialer:\ 58288149Semaste :tc=default: 59288149Semaste 60288149Semaste# 61288149Semaste# Root can always login 62288149Semaste# 63288149Semasteroot:\ 64288149Semaste :ignorenologin:\ 65288149Semaste :tc=default: 66288149Semaste 67288149Semaste# 68288149Semaste# Russian Users Accounts. Setup proper environment variables. 69288149Semaste# 70288149Semasterussian:Russian Users Accounts:\ 71288149Semaste :charset=KOI8-R:\ 72288149Semaste :lang=ru_RU.KOI8-R:\ 73288149Semaste :tc=default: 74288149Semaste 75288149Semaste 76288149Semaste###################################################################### 77288149Semaste###################################################################### 78288149Semaste## 79288149Semaste## Example entries 80288149Semaste## 81288149Semaste###################################################################### 82288149Semaste###################################################################### 83288149Semaste 84288149Semaste## Authentication methods 85288149Semaste## Note that these are disabled by default, and libutil must 86288149Semaste## be rebuilt with LOGIN_CAP_AUTH defined to use them. 87288149Semaste# 88288149Semaste#auth-defaults:\ 89288149Semaste# :auth=krb_skey_or_passwd,passwd,kerberos,skey: 90288149Semaste# 91288149Semaste#auth-root-defaults:\ 92288149Semaste# :auth-login=krb_skey_or_passwd,passwd,kerberos,skey:\ 93288149Semaste# :auth-rlogin=krb_or_skey,kerberos,skey: 94288149Semaste# 95288149Semaste#auth-ftp-defaults:\ 96288149Semaste# :auth=skey_or_pwd,passwd,skey: 97288149Semaste# 98288149Semaste# 99288149Semaste## Example defaults 100288149Semaste## These settings are used by login(1) by default for classless users 101288149Semaste## Note that entries like "cputime" set both "cputime-cur" and "cputime-max" 102288149Semaste# 103288149Semaste#default:\ 104288149Semaste# :cputime=infinity:\ 105288149Semaste# :datasize-cur=22M:\ 106288149Semaste# :stacksize-cur=8M:\ 107288149Semaste# :memorylocked-cur=10M:\ 108288149Semaste# :memoryuse-cur=30M:\ 109288149Semaste# :filesize=infinity:\ 110288149Semaste# :coredumpsize=infinity:\ 111288149Semaste# :maxproc-cur=64:\ 112288149Semaste# :openfiles-cur=64:\ 113288149Semaste# :priority=0:\ 114288149Semaste# :requirehome@:\ 115288149Semaste# :umask=022:\ 116288149Semaste# :tc=auth-defaults: 117288149Semaste# 118288149Semaste# 119288149Semaste## 120288149Semaste## standard - standard user defaults 121288149Semaste## 122288149Semaste#standard:\ 123288149Semaste# :copyright=/etc/COPYRIGHT:\ 124288149Semaste# :welcome=/etc/motd:\ 125288149Semaste# :setenv=MAIL=/var/mail/$,BLOCKSIZE=K,EDITOR=/usr/bin/ee:\ 126288149Semaste# :path=~/bin /bin /usr/bin /usr/local/bin:\ 127288149Semaste# :manpath=/usr/share/man /usr/local/man:\ 128288149Semaste# :nologin=/etc/nologin:\ 129288149Semaste# :cputime=1h30m:\ 130288149Semaste# :datasize=8M:\ 131288149Semaste# :stacksize=2M:\ 132288149Semaste# :memorylocked=4M:\ 133288149Semaste# :memoryuse=8M:\ 134288149Semaste# :filesize=8M:\ 135288149Semaste# :coredumpsize=8M:\ 136288149Semaste# :openfiles=24:\ 137288149Semaste# :maxproc=32:\ 138288149Semaste# :priority=0:\ 139288149Semaste# :requirehome:\ 140288149Semaste# :passwordperiod=90d:\ 141288149Semaste# :umask=002:\ 142288149Semaste# :ignoretime@:\ 143288149Semaste# :tc=default: 144288149Semaste# 145288149Semaste# 146288149Semaste## 147288149Semaste## users of X (needs more resources!) 148288149Semaste## 149288149Semaste#xuser:\ 150288149Semaste# :manpath=/usr/share/man /usr/X11R6/man /usr/local/man:\ 151288149Semaste# :cputime=4h:\ 152288149Semaste# :datasize=12M:\ 153288149Semaste# :stacksize=4M:\ 154288149Semaste# :filesize=8M:\ 155288149Semaste# :memoryuse=16M:\ 156288149Semaste# :openfiles=32:\ 157288149Semaste# :maxproc=48:\ 158288149Semaste# :tc=standard: 159288149Semaste# 160288149Semaste# 161288149Semaste## 162288149Semaste## Staff users - few restrictions and allow login anytime 163288149Semaste## 164288149Semaste#staff:\ 165288149Semaste# :ignorenologin:\ 166288149Semaste# :ignoretime:\ 167288149Semaste# :requirehome@:\ 168288149Semaste# :accounted@:\ 169288149Semaste# :path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 170288149Semaste# :umask=022:\ 171288149Semaste# :tc=standard: 172288149Semaste# 173288149Semaste# 174288149Semaste## 175288149Semaste## root - fallback for root logins 176288149Semaste## 177288149Semaste#root:\ 178288149Semaste# :path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 179288149Semaste# :cputime=infinity:\ 180288149Semaste# :datasize=infinity:\ 181288149Semaste# :stacksize=infinity:\ 182288149Semaste# :memorylocked=infinity:\ 183288149Semaste# :memoryuse=infinity:\ 184288149Semaste# :filesize=infinity:\ 185288149Semaste# :coredumpsize=infinity:\ 186288149Semaste# :openfiles=infinity:\ 187288149Semaste# :maxproc=infinity:\ 188288149Semaste# :memoryuse-cur=32M:\ 189288149Semaste# :maxproc-cur=64:\ 190288149Semaste# :openfiles-cur=1024:\ 191288149Semaste# :priority=0:\ 192288149Semaste# :requirehome@:\ 193288149Semaste# :umask=022:\ 194288149Semaste# :tc=auth-root-defaults: 195288149Semaste# 196288149Semaste# 197288149Semaste## 198288149Semaste## Settings used by /etc/rc 199288149Semaste## 200288149Semaste#daemon:\ 201288149Semaste# :coredumpsize@:\ 202288149Semaste# :coredumpsize-cur=0:\ 203288149Semaste# :datasize=infinity:\ 204288149Semaste# :datasize-cur@:\ 205288149Semaste# :maxproc=512:\ 206288149Semaste# :maxproc-cur@:\ 207288149Semaste# :memoryuse-cur=64M:\ 208288149Semaste# :memorylocked-cur=64M:\ 209288149Semaste# :openfiles=1024:\ 210288149Semaste# :openfiles-cur@:\ 211288149Semaste# :stacksize=16M:\ 212288149Semaste# :stacksize-cur@:\ 213288149Semaste# :tc=default: 214288149Semaste# 215288149Semaste# 216288149Semaste## 217288149Semaste## Settings used by news subsystem 218288149Semaste## 219288149Semaste#news:\ 220288149Semaste# :path=/usr/local/news/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 221288149Semaste# :cputime=infinity:\ 222288149Semaste# :filesize=128M:\ 223288149Semaste# :datasize-cur=64M:\ 224288149Semaste# :stacksize-cur=32M:\ 225288149Semaste# :coredumpsize-cur=0:\ 226288149Semaste# :maxmemorysize-cur=128M:\ 227288149Semaste# :memorylocked=32M:\ 228288149Semaste# :maxproc=128:\ 229288149Semaste# :openfiles=256:\ 230288149Semaste# :tc=default: 231288149Semaste# 232288149Semaste# 233288149Semaste## 234288149Semaste## The dialer class should be used for a dialup PPP/SLIP accounts 235288149Semaste## Welcome messages/news suppressed 236288149Semaste## 237288149Semaste#dialer:\ 238288149Semaste# :hushlogin:\ 239288149Semaste# :requirehome@:\ 240288149Semaste# :cputime=unlimited:\ 241288149Semaste# :filesize=2M:\ 242288149Semaste# :datasize=2M:\ 243288149Semaste# :stacksize=4M:\ 244288149Semaste# :coredumpsize=0:\ 245288149Semaste# :memoryuse=4M:\ 246288149Semaste# :memorylocked=1M:\ 247288149Semaste# :maxproc=16:\ 248288149Semaste# :openfiles=32:\ 249288149Semaste# :tc=standard: 250288149Semaste# 251288149Semaste# 252288149Semaste## 253288149Semaste## Site full-time 24/7 PPP/SLIP connections 254288149Semaste## - no time accounting, restricted to access via dialin lines 255288149Semaste## 256288149Semaste#site:\ 257288149Semaste# :ignoretime:\ 258288149Semaste# :passwordperiod@:\ 259288149Semaste# :refreshtime@:\ 260288149Semaste# :refreshperiod@:\ 261288149Semaste# :sessionlimit@:\ 262288149Semaste# :autodelete@:\ 263288149Semaste# :expireperiod@:\ 264288149Semaste# :graceexpire@:\ 265288149Semaste# :gracetime@:\ 266288149Semaste# :warnexpire@:\ 267288149Semaste# :warnpassword@:\ 268288149Semaste# :idletime@:\ 269288149Semaste# :sessiontime@:\ 270288149Semaste# :daytime@:\ 271288149Semaste# :weektime@:\ 272288149Semaste# :monthtime@:\ 273288149Semaste# :warntime@:\ 274288149Semaste# :accounted@:\ 275288149Semaste# :tc=dialer:\ 276288149Semaste# :tc=staff: 277288149Semaste# 278288149Semaste# 279288149Semaste## 280288149Semaste## Example standard accounting entries for subscriber levels 281288149Semaste## 282288149Semaste# 283288149Semaste#subscriber|Subscribers:\ 284288149Semaste# :accounted:\ 285288149Semaste# :refreshtime=180d:\ 286288149Semaste# :refreshperiod@:\ 287288149Semaste# :sessionlimit@:\ 288288149Semaste# :autodelete=30d:\ 289288149Semaste# :expireperiod=180d:\ 290288149Semaste# :graceexpire=7d:\ 291288149Semaste# :gracetime=10m:\ 292288149Semaste# :warnexpire=7d:\ 293288149Semaste# :warnpassword=7d:\ 294288149Semaste# :idletime=30m:\ 295288149Semaste# :sessiontime=4h:\ 296288149Semaste# :daytime=6h:\ 297288149Semaste# :weektime=40h:\ 298288149Semaste# :monthtime=120h:\ 299288149Semaste# :warntime=4h:\ 300288149Semaste# :tc=standard: 301288149Semaste# 302288149Semaste# 303288149Semaste## 304288149Semaste## Subscriber accounts. These accounts have their login times 305288149Semaste## accounted and have access limits applied. 306288149Semaste## 307288149Semaste#subppp|PPP Subscriber Accounts:\ 308288149Semaste# :tc=dialer:\ 309288149Semaste# :tc=subscriber: 310288149Semaste# 311288149Semaste# 312288149Semaste#subslip|SLIP Subscriber Accounts:\ 313288149Semaste# :tc=dialer:\ 314288149Semaste# :tc=subscriber: 315288149Semaste# 316288149Semaste# 317288149Semaste#subshell:Shell Subscriber Accounts:\ 318288149Semaste# :tc=subscriber: 319288149Semaste# 320288149Semaste# 321288149Semaste## 322288149Semaste## Russian Users Accounts. Setup proper environment variables. 323288149Semaste## 324288149Semaste#russian:Russian Users Accounts:\ 325288149Semaste# :charset=KOI8-R:\ 326288149Semaste# :lang=ru_RU.KOI8-R:\ 327288149Semaste# :tc=default: 328288149Semaste