login.conf revision 23141
1# Sample login.conf - login class capabilities database. 2# To speed up access to this data, you can use /bin/cap_mkdb 3# to create a database form of this file: 4# 5# cap_mkdb /etc/login.conf 6# 7# Don't forget to do this after each edit as well! 8# 9# This file controls resource limits, accounting limits and 10# default user environment settings. 11# 12# $Id: login.conf,v 1.5 1997/02/23 09:20:41 peter Exp $ 13# 14 15 16# Authentication methods 17 18auth-defaults:\ 19 :auth=krb_skey_or_passwd,passwd,kerberos,skey: 20 21auth-root-defaults:\ 22 :auth-login=krb_skey_or_passwd,passwd,kerberos,skey:\ 23 :auth-rlogin=krb_or_skey,kerberos,skey:\ 24 25auth-ftp-defaults:\ 26 :auth=skey_or_pwd,passwd,skey: 27 28 29# Example defaults 30# These settings are used by login(1) by default for classless users 31# Note that entries like "cputime" set both "cputime-cur" and "cputime-max" 32 33default:\ 34 :cputime=infinity:\ 35 :datasize-cur=16M:\ 36 :stacksize-cur=8M:\ 37 :memorylocked-cur=10M:\ 38 :memoryuse-cur=30M:\ 39 :filesize=infinity:\ 40 :coredumpsize=infinity:\ 41 :maxproc-cur=64:\ 42 :openfiles-cur=64:\ 43 :priority=0:\ 44 :requirehome:\ 45 :term=dumb:\ 46 :umask=022:\ 47 :rc=auth-defaults: 48 49 50# 51# standard - standard user defaults 52# 53standard:\ 54 :copyright=/etc/COPYRIGHT:\ 55 :welcome=/etc/motd:\ 56 :setenv=MAIL=/var/mail/$,BLOCKSIZE=K,EDITOR=/usr/bin/ee:\ 57 :path=~/bin /bin /usr/bin /usr/local/bin:\ 58 :manpath=/usr/share/man /usr/local/man:\ 59 :nologin=/etc/nologin:\ 60 :cputime=1h30m:\ 61 :datasize=8M:\ 62 :stacksize=2M:\ 63 :memorylocked=4M:\ 64 :memoryuse=8M:\ 65 :filesize=8M:\ 66 :coredumpsize=8M:\ 67 :openfiles=24:\ 68 :maxproc=32:\ 69 :priority=0:\ 70 :requirehome:\ 71 :passwordperiod=90d:\ 72 :umask=002:\ 73 :ignoretime@:\ 74 :tc=default: 75 76 77# 78# users of X (needs more resources!) 79# 80xuser:\ 81 :manpath=/usr/share/man /usr/X11R6/man /usr/local/man:\ 82 :cputime=4h:\ 83 :datasize=12M:\ 84 :stacksize=4M:\ 85 :filesize=8M:\ 86 :memoryuse=16M:\ 87 :openfiles=32:\ 88 :maxproc=48:\ 89 :tc=standard: 90 91 92# 93# Staff users - few restrictions and allow login anytime 94# 95staff:\ 96 :ignorenologin:\ 97 :ignoretime:\ 98 :requirehome@:\ 99 :accounted@:\ 100 :path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 101 :umask=022:\ 102 :tc=standard: 103 104 105# 106# root - fallback for root logins 107# 108root:\ 109 :path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 110 :cputime=infinity:\ 111 :datasize=infinity:\ 112 :stacksize=infinity:\ 113 :memorylocked=infinity:\ 114 :memoryuse=infinity:\ 115 :filesize=infinity:\ 116 :coredumpsize=infinity:\ 117 :openfiles=infinity:\ 118 :maxproc=infinity:\ 119 :memoryuse-cur=32M:\ 120 :maxproc-cur=64:\ 121 :openfiles-cur=1024:\ 122 :priority=0:\ 123 :requirehome@:\ 124 :umask=022:\ 125 :tc=auth-root-defaults:\ 126 127 128# 129# Settings used by /etc/rc 130# 131daemon:\ 132 :cputime=infinity:\ 133 :filesize=64M:\ 134 :datasize=32M:\ 135 :stacksize=16M:\ 136 :coredumpsize=0:\ 137 :memoryuse-cur=64M:\ 138 :memorylocked-cur=64M:\ 139 :maxproc=32:\ 140 :openfiles=1024:\ 141 :tc=default: 142 143 144# 145# Settings used by news subsystem 146# 147news:\ 148 :path=/usr/local/news/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 149 :cputime=infinity:\ 150 :filesize=128M:\ 151 :datasize-curr=64M:\ 152 :stacksize-cur=32M:\ 153 :coredumpsize-cur=0:\ 154 :maxmemorysize-cur=128M:\ 155 :memorylocked=32M:\ 156 :maxproc=128:\ 157 :openfiles=256:\ 158 :tc=default: 159 160 161# 162# The dialer class should be used for a dialup PPP/SLIP accounts 163# Welcome messages/news suppressed 164# 165dialer:\ 166 :hushlogin:\ 167 :requirehome@:\ 168 :cputime=unlimited:\ 169 :filesize=2M:\ 170 :datasize=2M:\ 171 :stacksize=4M:\ 172 :coredumpsize=0:\ 173 :memoryuse=4M:\ 174 :memorylocked=1M:\ 175 :maxproc=16:\ 176 :openfiles=32:\ 177 :tc=standard: 178 179 180# 181# Site full-time 24/7 PPP/SLIP connections 182# - no time accounting, restricted to access via dialin lines 183# 184site:\ 185 :ignoretime:\ 186 :passwordperiod@:\ 187 :refreshtime@:\ 188 :refreshperiod@:\ 189 :sessionlimit@:\ 190 :autodelete@:\ 191 :expireperiod@:\ 192 :graceexpire@:\ 193 ;gracetime@:\ 194 :warnexpire@:\ 195 :warnpassword@:\ 196 :idletime@:\ 197 :sessiontime@:\ 198 :daytime@:\ 199 :weektime@:\ 200 :monthtime@:\ 201 :warntime@:\ 202 :accounted@:\ 203 :tc=dialer:\ 204 :tc=staff: 205 206 207# 208# Example standard accounting entries for subscriber levels 209# 210 211subscriber|Subscribers:\ 212 :accounted:\ 213 :refreshtime=180d:\ 214 :refreshperiod@:\ 215 :sessionlimit@:\ 216 :autodelete=30d:\ 217 :expireperiod=180d:\ 218 :graceexpire=7d:\ 219 :gracetime=10m:\ 220 :warnexpire=7d:\ 221 :warnpassword=7d:\ 222 :idletime=30m:\ 223 :sessiontime=4h:\ 224 :daytime=6h:\ 225 :weektime=40h:\ 226 :monthtime=120h:\ 227 :warntime=4h:\ 228 :tc=standard: 229 230 231# 232# Subscriber accounts. These accounts have their login times 233# accounted and have access limits applied. 234# 235subppp|PPP Subscriber Accounts:\ 236 :tc=dialer:\ 237 :tc=subscriber: 238 239 240subslip|SLIP Subscriber Accounts:\ 241 :tc=dialer:\ 242 :tc=subscriber: 243 244 245subshell:Shell Subscriber Accounts:\ 246 :tc=subscriber: 247 248