login.conf revision 26061
15536Salanb# Sample login.conf - login class capabilities database. 29330Slana# To speed up access to this data, you can use /usr/bin/cap_mkdb 35536Salanb# to create a database form of this file: 45536Salanb# 55536Salanb# cap_mkdb /etc/login.conf 65536Salanb# 75536Salanb# Don't forget to do this after each edit as well! 85536Salanb# 95536Salanb# This file controls resource limits, accounting limits and 105536Salanb# default user environment settings. 115536Salanb# 125536Salanb# $Id: login.conf,v 1.11 1997/05/23 00:12:34 pst Exp $ 135536Salanb# 145536Salanb 155536Salanb 165536Salanb# Authentication methods 175536Salanb 185536Salanbauth-defaults:\ 195536Salanb :auth=krb_skey_or_passwd,passwd,kerberos,skey: 205536Salanb 215536Salanbauth-root-defaults:\ 225536Salanb :auth-login=krb_skey_or_passwd,passwd,kerberos,skey:\ 235536Salanb :auth-rlogin=krb_or_skey,kerberos,skey:\ 245536Salanb 258611Salanbauth-ftp-defaults:\ 265536Salanb :auth=skey_or_pwd,passwd,skey: 2711822Sdarcy 285536Salanb 295536Salanb# Example defaults 305536Salanb# These settings are used by login(1) by default for classless users 315536Salanb# Note that entries like "cputime" set both "cputime-cur" and "cputime-max" 325536Salanb 335536Salanbdefault:\ 345536Salanb :cputime=infinity:\ 355536Salanb :datasize-cur=16M:\ 365536Salanb :stacksize-cur=8M:\ 375536Salanb :memorylocked-cur=10M:\ 385536Salanb :memoryuse-cur=30M:\ 395536Salanb :filesize=infinity:\ 405536Salanb :coredumpsize=infinity:\ 415536Salanb :maxproc-cur=64:\ 428611Salanb :openfiles-cur=64:\ 435536Salanb :priority=0:\ 448611Salanb :requirehome@:\ 455536Salanb :umask=022:\ 468611Salanb :tc=auth-defaults: 478611Salanb 485536Salanb 495536Salanb# 505536Salanb# standard - standard user defaults 515536Salanb# 525536Salanbstandard:\ 535536Salanb :copyright=/etc/COPYRIGHT:\ 545536Salanb :welcome=/etc/motd:\ 555536Salanb :setenv=MAIL=/var/mail/$,BLOCKSIZE=K,EDITOR=/usr/bin/ee:\ 565536Salanb :path=~/bin /bin /usr/bin /usr/local/bin:\ 575536Salanb :manpath=/usr/share/man /usr/local/man:\ 585536Salanb :nologin=/etc/nologin:\ 595536Salanb :cputime=1h30m:\ 605536Salanb :datasize=8M:\ 615536Salanb :stacksize=2M:\ 625536Salanb :memorylocked=4M:\ 635536Salanb :memoryuse=8M:\ 645536Salanb :filesize=8M:\ 655536Salanb :coredumpsize=8M:\ 665536Salanb :openfiles=24:\ 675536Salanb :maxproc=32:\ 685536Salanb :priority=0:\ 695536Salanb :requirehome:\ 705536Salanb :passwordperiod=90d:\ 715536Salanb :umask=002:\ 725536Salanb :ignoretime@:\ 735536Salanb :tc=default: 745536Salanb 755536Salanb 768611Salanb# 775536Salanb# users of X (needs more resources!) 788611Salanb# 798611Salanbxuser:\ 808611Salanb :manpath=/usr/share/man /usr/X11R6/man /usr/local/man:\ 818611Salanb :cputime=4h:\ 825536Salanb :datasize=12M:\ 835536Salanb :stacksize=4M:\ 848611Salanb :filesize=8M:\ 855536Salanb :memoryuse=16M:\ 865536Salanb :openfiles=32:\ 875536Salanb :maxproc=48:\ 885536Salanb :tc=standard: 895536Salanb 905536Salanb 915536Salanb# 925536Salanb# Staff users - few restrictions and allow login anytime 935536Salanb# 945536Salanbstaff:\ 955536Salanb :ignorenologin:\ 965536Salanb :ignoretime:\ 975536Salanb :requirehome@:\ 985536Salanb :accounted@:\ 995536Salanb :path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 1005536Salanb :umask=022:\ 1015536Salanb :tc=standard: 1025536Salanb 1035536Salanb 1045536Salanb# 1055536Salanb# root - fallback for root logins 1068611Salanb# 1078611Salanbroot:\ 1088611Salanb :path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 1098611Salanb :cputime=infinity:\ 1108611Salanb :datasize=infinity:\ 1118611Salanb :stacksize=infinity:\ 1128611Salanb :memorylocked=infinity:\ 1138611Salanb :memoryuse=infinity:\ 1148611Salanb :filesize=infinity:\ 1158611Salanb :coredumpsize=infinity:\ 1168611Salanb :openfiles=infinity:\ 1178611Salanb :maxproc=infinity:\ 1188611Salanb :memoryuse-cur=32M:\ 1198611Salanb :maxproc-cur=64:\ 1208611Salanb :openfiles-cur=1024:\ 1218611Salanb :priority=0:\ 1228611Salanb :requirehome@:\ 1238611Salanb :umask=022:\ 1248611Salanb :tc=auth-root-defaults:\ 1258611Salanb 1268611Salanb 1278611Salanb# 1288611Salanb# Settings used by /etc/rc 1298611Salanb# 1308611Salanbdaemon:\ 1318611Salanb :coredumpsize=0:\ 1328611Salanb :datasize=32M:\ 1338611Salanb :maxproc=256:\ 1348611Salanb :maxproc-cur@:\ 1358611Salanb :memoryuse-cur=64M:\ 1368611Salanb :memorylocked-cur=64M:\ 1378611Salanb :openfiles=1024:\ 1388611Salanb :openfiles-cur@:\ 1398611Salanb :stacksize=16M:\ 1408611Salanb :tc=default: 1418611Salanb 1428611Salanb 1438611Salanb# 1448611Salanb# Settings used by news subsystem 1458611Salanb# 1468611Salanbnews:\ 1475536Salanb :path=/usr/local/news/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 1485536Salanb :cputime=infinity:\ 1495536Salanb :filesize=128M:\ 1505536Salanb :datasize-curr=64M:\ 1515536Salanb :stacksize-cur=32M:\ 1525536Salanb :coredumpsize-cur=0:\ 1535536Salanb :maxmemorysize-cur=128M:\ 1545536Salanb :memorylocked=32M:\ 1555536Salanb :maxproc=128:\ 1565536Salanb :openfiles=256:\ 1575536Salanb :tc=default: 1585536Salanb 1595536Salanb 1608611Salanb# 1615536Salanb# The dialer class should be used for a dialup PPP/SLIP accounts 1625536Salanb# Welcome messages/news suppressed 1638611Salanb# 1648611Salanbdialer:\ 1658611Salanb :hushlogin:\ 1668611Salanb :requirehome@:\ 1678611Salanb :cputime=unlimited:\ 1688611Salanb :filesize=2M:\ 1698611Salanb :datasize=2M:\ 1705536Salanb :stacksize=4M:\ 1715536Salanb :coredumpsize=0:\ 1728611Salanb :memoryuse=4M:\ 1738611Salanb :memorylocked=1M:\ 1748611Salanb :maxproc=16:\ 1758611Salanb :openfiles=32:\ 1768611Salanb :tc=standard: 1778611Salanb 1788611Salanb 1798611Salanb# 1808611Salanb# Site full-time 24/7 PPP/SLIP connections 1818611Salanb# - no time accounting, restricted to access via dialin lines 1828611Salanb# 1838611Salanbsite:\ 1848611Salanb :ignoretime:\ 1858611Salanb :passwordperiod@:\ 1868611Salanb :refreshtime@:\ 1878611Salanb :refreshperiod@:\ 1888611Salanb :sessionlimit@:\ 1898611Salanb :autodelete@:\ 1908611Salanb :expireperiod@:\ 1918611Salanb :graceexpire@:\ 1928611Salanb ;gracetime@:\ 1938611Salanb :warnexpire@:\ 1945536Salanb :warnpassword@:\ 1958611Salanb :idletime@:\ 1968611Salanb :sessiontime@:\ 1978611Salanb :daytime@:\ 1988611Salanb :weektime@:\ 1998611Salanb :monthtime@:\ 2008611Salanb :warntime@:\ 2015536Salanb :accounted@:\ 2025536Salanb :tc=dialer:\ 2035536Salanb :tc=staff: 2045536Salanb 2055536Salanb 2065536Salanb# 2075536Salanb# Example standard accounting entries for subscriber levels 2085536Salanb# 2095536Salanb 210subscriber|Subscribers:\ 211 :accounted:\ 212 :refreshtime=180d:\ 213 :refreshperiod@:\ 214 :sessionlimit@:\ 215 :autodelete=30d:\ 216 :expireperiod=180d:\ 217 :graceexpire=7d:\ 218 :gracetime=10m:\ 219 :warnexpire=7d:\ 220 :warnpassword=7d:\ 221 :idletime=30m:\ 222 :sessiontime=4h:\ 223 :daytime=6h:\ 224 :weektime=40h:\ 225 :monthtime=120h:\ 226 :warntime=4h:\ 227 :tc=standard: 228 229 230# 231# Subscriber accounts. These accounts have their login times 232# accounted and have access limits applied. 233# 234subppp|PPP Subscriber Accounts:\ 235 :tc=dialer:\ 236 :tc=subscriber: 237 238 239subslip|SLIP Subscriber Accounts:\ 240 :tc=dialer:\ 241 :tc=subscriber: 242 243 244subshell:Shell Subscriber Accounts:\ 245 :tc=subscriber: 246 247 248# 249# Russian Users Accounts. Setup proper environment variables. 250# 251russian:Russian Users Accounts:\ 252 :charset=KOI8-R:\ 253 :lang=ru_RU.KOI8-R:\ 254 :tc=default: 255