login.conf revision 34346 
1# Sample login.conf - login class capabilities database.
2# To speed up access to this data, you can use /usr/bin/cap_mkdb
3# to create a database form of this file:
4#
5#	cap_mkdb /etc/login.conf
6#
7# Don't forget to do this after each edit as well!
8#
9# This file controls resource limits, accounting limits and
10# default user environment settings.
11#
12#	$Id: login.conf,v 1.19 1997/12/03 01:12:48 ache Exp $
13#
14
15
16# Authentication methods
17
18auth-defaults:\
19	:auth=krb_skey_or_passwd,passwd,kerberos,skey:
20
21auth-root-defaults:\
22	:auth-login=krb_skey_or_passwd,passwd,kerberos,skey:\
23	:auth-rlogin=krb_or_skey,kerberos,skey:
24
25auth-ftp-defaults:\
26	:auth=skey_or_pwd,passwd,skey:
27
28
29# Example defaults
30# These settings are used by login(1) by default for classless users
31# Note that entries like "cputime" set both "cputime-cur" and "cputime-max"
32
33default:\
34	:cputime=infinity:\
35	:datasize-cur=22M:\
36	:stacksize-cur=8M:\
37	:memorylocked-cur=10M:\
38	:memoryuse-cur=30M:\
39	:filesize=infinity:\
40	:coredumpsize=infinity:\
41	:maxproc-cur=64:\
42	:openfiles-cur=64:\
43	:priority=0:\
44	:requirehome@:\
45	:umask=022:\
46	:tc=auth-defaults:
47
48
49#
50# standard - standard user defaults
51#
52standard:\
53	:copyright=/etc/COPYRIGHT:\
54	:welcome=/etc/motd:\
55	:setenv=MAIL=/var/mail/$,BLOCKSIZE=K,EDITOR=/usr/bin/ee:\
56	:path=~/bin /bin /usr/bin /usr/local/bin:\
57	:manpath=/usr/share/man /usr/local/man:\
58	:nologin=/etc/nologin:\
59	:cputime=1h30m:\
60	:datasize=8M:\
61	:stacksize=2M:\
62	:memorylocked=4M:\
63	:memoryuse=8M:\
64	:filesize=8M:\
65	:coredumpsize=8M:\
66	:openfiles=24:\
67	:maxproc=32:\
68	:priority=0:\
69	:requirehome:\
70	:passwordperiod=90d:\
71	:umask=002:\
72	:ignoretime@:\
73	:tc=default:
74
75
76#
77# users of X (needs more resources!)
78#
79xuser:\
80	:manpath=/usr/share/man /usr/X11R6/man /usr/local/man:\
81	:cputime=4h:\
82	:datasize=12M:\
83	:stacksize=4M:\
84	:filesize=8M:\
85	:memoryuse=16M:\
86	:openfiles=32:\
87	:maxproc=48:\
88	:tc=standard:
89
90
91#
92# Staff users - few restrictions and allow login anytime
93#
94staff:\
95	:ignorenologin:\
96	:ignoretime:\
97	:requirehome@:\
98	:accounted@:\
99	:path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\
100	:umask=022:\
101	:tc=standard:
102
103
104#
105# root - fallback for root logins
106#
107root:\
108	:path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\
109	:cputime=infinity:\
110	:datasize=infinity:\
111	:stacksize=infinity:\
112	:memorylocked=infinity:\
113	:memoryuse=infinity:\
114	:filesize=infinity:\
115	:coredumpsize=infinity:\
116	:openfiles=infinity:\
117	:maxproc=infinity:\
118	:memoryuse-cur=32M:\
119	:maxproc-cur=64:\
120	:openfiles-cur=1024:\
121	:priority=0:\
122	:requirehome@:\
123	:umask=022:\
124	:tc=auth-root-defaults:
125
126
127#
128# Settings used by /etc/rc
129#
130daemon:\
131	:coredumpsize@:\
132	:coredumpsize-cur=0:\
133	:datasize=infinity:\
134	:datasize-cur@:\
135	:maxproc=512:\
136	:maxproc-cur@:\
137	:memoryuse-cur=64M:\
138	:memorylocked-cur=64M:\
139	:openfiles=1024:\
140	:openfiles-cur@:\
141	:stacksize=16M:\
142	:stacksize-cur@:\
143	:tc=default:
144
145
146#
147# Settings used by news subsystem
148#
149news:\
150	:path=/usr/local/news/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\
151	:cputime=infinity:\
152	:filesize=128M:\
153	:datasize-cur=64M:\
154	:stacksize-cur=32M:\
155	:coredumpsize-cur=0:\
156	:maxmemorysize-cur=128M:\
157	:memorylocked=32M:\
158	:maxproc=128:\
159	:openfiles=256:\
160	:tc=default:
161
162
163#
164# The dialer class should be used for a dialup PPP/SLIP accounts
165# Welcome messages/news suppressed
166#
167dialer:\
168	:hushlogin:\
169	:requirehome@:\
170	:cputime=unlimited:\
171	:filesize=2M:\
172	:datasize=2M:\
173	:stacksize=4M:\
174	:coredumpsize=0:\
175	:memoryuse=4M:\
176	:memorylocked=1M:\
177	:maxproc=16:\
178	:openfiles=32:\
179	:tc=standard:
180
181
182#
183# Site full-time 24/7 PPP/SLIP connections
184# - no time accounting, restricted to access via dialin lines
185#
186site:\
187	:ignoretime:\
188	:passwordperiod@:\
189	:refreshtime@:\
190	:refreshperiod@:\
191	:sessionlimit@:\
192	:autodelete@:\
193	:expireperiod@:\
194	:graceexpire@:\
195	:gracetime@:\
196	:warnexpire@:\
197	:warnpassword@:\
198	:idletime@:\
199	:sessiontime@:\
200	:daytime@:\
201	:weektime@:\
202	:monthtime@:\
203	:warntime@:\
204	:accounted@:\
205	:tc=dialer:\
206	:tc=staff:
207
208
209#
210# Example standard accounting entries for subscriber levels
211#
212
213subscriber|Subscribers:\
214	:accounted:\
215	:refreshtime=180d:\
216	:refreshperiod@:\
217	:sessionlimit@:\
218	:autodelete=30d:\
219	:expireperiod=180d:\
220	:graceexpire=7d:\
221	:gracetime=10m:\
222	:warnexpire=7d:\
223	:warnpassword=7d:\
224	:idletime=30m:\
225	:sessiontime=4h:\
226	:daytime=6h:\
227	:weektime=40h:\
228	:monthtime=120h:\
229	:warntime=4h:\
230	:tc=standard:
231
232
233#
234# Subscriber accounts. These accounts have their login times
235# accounted and have access limits applied.
236#
237subppp|PPP Subscriber Accounts:\
238	:tc=dialer:\
239	:tc=subscriber:
240
241
242subslip|SLIP Subscriber Accounts:\
243	:tc=dialer:\
244	:tc=subscriber:
245
246
247subshell:Shell Subscriber Accounts:\
248	:tc=subscriber:
249
250
251#
252# Russian Users Accounts. Setup proper environment variables.
253#
254russian:Russian Users Accounts:\
255	:charset=KOI8-R:\
256	:lang=ru_RU.KOI8-R:\
257	:tc=default:
258