login.conf revision 23037 
1# Sample login.conf - login class capabilities database.
2# To speed up access to this data, you can use /bin/cap_mkdb
3# to create a database form of this file:
4#
5#	cap_mkdb /etc/login.conf
6#
7# Don't forget to do this after each edit as well!
8#
9# This file controls resource limits, accounting limits and
10# default user environment settings.
11#
12#	$Id$
13#
14
15
16# Authentication methods
17
18auth-defaults:\
19	:auth=krb_skey_or_passwd,passwd,kerberos,skey:
20
21auth-root-defaults:\
22	:auth-login=krb_skey_or_passwd,passwd,kerberos,skey:\
23	:auth-rlogin=krb_or_skey,kerberos,skey:\
24
25auth-ftp-defaults:\
26	:auth=skey_or_pwd,passwd,skey:
27
28
29# Example defaults
30# These settings are used by login(1) by default for classless users
31# Note that entries like "cputime" set both "cputime-cur" and "cputime-max"
32
33default:\
34	:cputime=infinity:\
35	:datasize-cur=16M:\
36	:stacksize-cur=8M:\
37	:memorylocked-cur=10M:\
38	:memoryuse-cur=30M:\
39	:filesize=infinity:\
40	:coredumpsize=infinity:\
41	:maxproc-cur=64:\
42	:openfiles-cur=64:\
43	:priority=0:\
44	:requirehome:\
45	:term=dumb:\
46	:umask=022:\
47	:rc=auth-defaults:
48
49
50#
51# standard - standard user defaults
52#
53standard:\
54	:copyright=/etc/COPYRIGHT:\
55	:welcome=/etc/motd:\
56	:setenv=MAIL=/var/mail/$,BLOCKSIZE=K,EDITOR=/usr/bin/ee:\
57	:path=~/bin /bin /usr/bin /usr/local/bin:\
58	:manpath=/usr/share/man /usr/local/man:\
59	:nologin=/etc/nologin:\
60	:cputime=1h30m:\
61	:datasize=8M:\
62	:stacksize=2M:\
63	:memorylocked=4M:\
64	:memoryuse=8M:\
65	:filesize=8M:\
66	:coredumpsize=8M:\
67	:openfiles=24:\
68	:maxproc=32:\
69	:priority=0:\
70	:requirehome:\
71	:passwordperiod=90d:\
72	:umask=002:\
73	:ignoretime@:\
74	:tc=default:
75
76
77#
78# users of X (needs more resources!)
79#
80xuser:\
81	:manpath=/usr/share/man /usr/X11R6/man /usr/local/man:\
82	:cputime=4h:\
83	:datasize=12M:\
84	:stacksize=4M:\
85	:filesize=8M:\
86	:memoryuse=16M:\
87	:openfiles=32:\
88	:maxproc=48:\
89	:tc=standard:
90
91
92#
93# Staff users - few restrictions and allow login anytime
94#
95staff:\
96	:ignorenologin:\
97	:ignoretime:\
98	:requirehome@:\
99	:accounted@:\
100	:path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\
101	:umask=022:\
102	:tc=standard:
103
104
105#
106# root - fallback for root logins
107#
108root:\
109	:path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\
110	:cputime=infinity:\
111	:datasize=infinity:\
112	:stacksize=infinity:\
113	:memorylocked=infinity:\
114	:memoryuse=infinity:\
115	:filesize=infinity:\
116	:coredumpsize=infinity:\
117	:openfiles=infinity:\
118	:maxproc=infinity:\
119	:memoryuse-cur=32M:\
120	:maxproc-cur=64:\
121	:openfiles-cur=256:\
122	:priority=0:\
123	:requirehome@:\
124	:umask=022:\
125	:tc=auth-root-defaults:\
126
127
128#
129# Settings used by /etc/rc
130#
131daemon:\
132	:cputime=infinity:\
133	:filesize=64M:\
134	:datasize=32M:\
135	:stacksize=16M:\
136	:coredumpsize=0:\
137	:memoryuse-cur=64M:\
138	:memorylocked-cur=64M:\
139	:maxproc=32:\
140	:openfiles=256:\
141	:tc=default:
142
143
144#
145# Settings used by news subsystem
146#
147news:\
148	:path=/usr/local/news/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\
149	:cputime=infinity:\
150	:filesize=128M:\
151	:datasize-curr=64M:\
152	:stacksize-cur=32M:\
153	:coredumpsize-cur=0:\
154	:maxmemorysize-cur=128M:\
155	:memorylocked=32M:\
156	:maxproc=128:\
157	:openfiles=256:\
158	:tc=default:
159
160
161#
162# The dialer class should be used for a dialup PPP/SLIP accounts
163# Welcome messages/news suppressed
164#
165dialer:\
166	:hushlogin:\
167	:requirehome@:\
168	:cputime=unlimited:\
169	:filesize=2M:\
170	:datasize=2M:\
171	:stacksize=4M:\
172	:coredumpsize=0:\
173	:memoryuse=4M:\
174	:memorylocked=1M:\
175	:maxproc=16:\
176	:openfiles=32:\
177	:tc=standard:
178
179
180#
181# Site full-time 24/7 PPP/SLIP connections
182# - no time accounting, restricted to access via dialin lines
183#
184site:\
185	:ignoretime:\
186	:passwordperiod@:\
187	:refreshtime@:\
188	:refreshperiod@:\
189	:sessionlimit@:\
190	:autodelete@:\
191	:expireperiod@:\
192	:graceexpire@:\
193	;gracetime@:\
194	:warnexpire@:\
195	:warnpassword@:\
196	:idletime@:\
197	:sessiontime@:\
198	:daytime@:\
199	:weektime@:\
200	:monthtime@:\
201	:warntime@:\
202	:accounted@:\
203	:tc=dialer:\
204	:tc=staff:
205
206
207#
208# Example standard accounting entries for subscriber levels
209#
210
211subscriber|Subscribers:\
212	:accounted:\
213	:refreshtime=180d:\
214	:refreshperiod@:\
215	:sessionlimit@:\
216	:autodelete=30d:\
217	:expireperiod=180d:\
218	:graceexpire=7d:\
219	:gracetime=10m:\
220	:warnexpire=7d:\
221	:warnpassword=7d:\
222	:idletime=30m:\
223	:sessiontime=4h:\
224	:daytime=6h:\
225	:weektime=40h:\
226	:monthtime=120h:\
227	:warntime=4h:\
228	:tc=standard:
229
230
231#
232# Subscriber accounts. These accounts have their login times
233# accounted and have access limits applied.
234#
235subppp|PPP Subscriber Accounts:\
236	:tc=dialer:\
237	:tc=subscriber:
238
239
240subslip|SLIP Subscriber Accounts:\
241	:tc=dialer:\
242	:tc=subscriber:
243
244
245subshell:Shell Subscriber Accounts:\
246	:tc=subscriber:
247
248