login.conf revision 31479
114239Sbde# Sample login.conf - login class capabilities database. 266830Sobrien# To speed up access to this data, you can use /usr/bin/cap_mkdb 366830Sobrien# to create a database form of this file: 466830Sobrien# 566830Sobrien# cap_mkdb /etc/login.conf 666830Sobrien# 766830Sobrien# Don't forget to do this after each edit as well! 866830Sobrien# 966830Sobrien# This file controls resource limits, accounting limits and 1066830Sobrien# default user environment settings. 1166830Sobrien# 1266830Sobrien# $Id: login.conf,v 1.17 1997/11/27 17:52:52 steve Exp $ 1366830Sobrien# 1466830Sobrien 1566830Sobrien 1666830Sobrien# Authentication methods 1766830Sobrien 1866830Sobrienauth-defaults:\ 1966830Sobrien :auth=krb_skey_or_passwd,passwd,kerberos,skey: 2066830Sobrien 2166830Sobrienauth-root-defaults:\ 2266830Sobrien :auth-login=krb_skey_or_passwd,passwd,kerberos,skey:\ 2366830Sobrien :auth-rlogin=krb_or_skey,kerberos,skey:\ 2466830Sobrien 2566830Sobrienauth-ftp-defaults:\ 2666830Sobrien :auth=skey_or_pwd,passwd,skey: 2750472Speter 2866830Sobrien 2914239Sbde# Example defaults 3013798Smpp# These settings are used by login(1) by default for classless users 311675Sache# Note that entries like "cputime" set both "cputime-cur" and "cputime-max" 327708Srgrimes 331675Sachedefault:\ 341675Sache :cputime=infinity:\ 351675Sache :datasize-cur=16M:\ 361675Sache :stacksize-cur=8M:\ 371675Sache :memorylocked-cur=10M:\ 381675Sache :memoryuse-cur=30M:\ 391675Sache :filesize=infinity:\ 401675Sache :coredumpsize=infinity:\ 411675Sache :maxproc-cur=64:\ 421675Sache :openfiles-cur=64:\ 4314239Sbde :priority=0:\ 4414239Sbde :requirehome@:\ 4514239Sbde :umask=022:\ 4614239Sbde :tc=auth-defaults: 471675Sache 481675Sache 4950357Ssheldonh# 5050454Ssheldonh# standard - standard user defaults 5150357Ssheldonh# 5250454Ssheldonhstandard:\ 5350357Ssheldonh :copyright=/etc/COPYRIGHT:\ 541675Sache :welcome=/etc/motd:\ 551675Sache :setenv=MAIL=/var/mail/$,BLOCKSIZE=K,EDITOR=/usr/bin/ee:\ 561675Sache :path=~/bin /bin /usr/bin /usr/local/bin:\ 571675Sache :manpath=/usr/share/man /usr/local/man:\ 581675Sache :nologin=/etc/nologin:\ 5914239Sbde :cputime=1h30m:\ 6014239Sbde :datasize=8M:\ 6114239Sbde :stacksize=2M:\ 6214239Sbde :memorylocked=4M:\ 631675Sache :memoryuse=8M:\ 641675Sache :filesize=8M:\ 651675Sache :coredumpsize=8M:\ 6650357Ssheldonh :openfiles=24:\ 6750357Ssheldonh :maxproc=32:\ 681675Sache :priority=0:\ 6950357Ssheldonh :requirehome:\ 701675Sache :passwordperiod=90d:\ 711675Sache :umask=002:\ 7250357Ssheldonh :ignoretime@:\ 7350357Ssheldonh :tc=default: 741675Sache 751675Sache 761675Sache# 771675Sache# users of X (needs more resources!) 781675Sache# 7914239Sbdexuser:\ 8014239Sbde :manpath=/usr/share/man /usr/X11R6/man /usr/local/man:\ 8114239Sbde :cputime=4h:\ 8214239Sbde :datasize=12M:\ 831675Sache :stacksize=4M:\ 841675Sache :filesize=8M:\ 857708Srgrimes :memoryuse=16M:\ 8650357Ssheldonh :openfiles=32:\ 871675Sache :maxproc=48:\ 881675Sache :tc=standard: 8950357Ssheldonh 9050357Ssheldonh 9150357Ssheldonh# 9250357Ssheldonh# Staff users - few restrictions and allow login anytime 931675Sache# 941675Sachestaff:\ 951675Sache :ignorenologin:\ 961675Sache :ignoretime:\ 971675Sache :requirehome@:\ 9814239Sbde :accounted@:\ 9914239Sbde :path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 10014239Sbde :umask=022:\ 10114239Sbde :tc=standard: 1021675Sache 1031675Sache 1041675Sache# 1051675Sache# root - fallback for root logins 10650357Ssheldonh# 10750357Ssheldonhroot:\ 10850357Ssheldonh :path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 10950357Ssheldonh :cputime=infinity:\ 1101675Sache :datasize=infinity:\ 1111675Sache :stacksize=infinity:\ 1121675Sache :memorylocked=infinity:\ 1131675Sache :memoryuse=infinity:\ 1141675Sache :filesize=infinity:\ 1151675Sache :coredumpsize=infinity:\ 1161675Sache :openfiles=infinity:\ 1171675Sache :maxproc=infinity:\ 1181675Sache :memoryuse-cur=32M:\ 1191675Sache :maxproc-cur=64:\ 12014239Sbde :openfiles-cur=1024:\ 12114239Sbde :priority=0:\ 12214239Sbde :requirehome@:\ 12314239Sbde :umask=022:\ 12450357Ssheldonh :tc=auth-root-defaults:\ 1251675Sache 1261675Sache 12750357Ssheldonh# 12850357Ssheldonh# Settings used by /etc/rc 12950357Ssheldonh# 1301675Sachedaemon:\ 1311675Sache :coredumpsize@:\ 1321675Sache :coredumpsize-cur=0:\ 1331675Sache :datasize=infinity:\ 1341675Sache :datasize-cur@:\ 13514239Sbde :maxproc=512:\ 1361675Sache :maxproc-cur@:\ 13714239Sbde :memoryuse-cur=64M:\ 13814239Sbde :memorylocked-cur=64M:\ 13914239Sbde :openfiles=1024:\ 14014239Sbde :openfiles-cur@:\ 14114239Sbde :stacksize=16M:\ 14214239Sbde :stacksize-cur@:\ 14314239Sbde :tc=default: 14414239Sbde 14514239Sbde 14614239Sbde# 14734561Sdanny# Settings used by news subsystem 14814239Sbde# 14914239Sbdenews:\ 15034561Sdanny :path=/usr/local/news/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 15114239Sbde :cputime=infinity:\ 15214239Sbde :filesize=128M:\ 15323607Sbde :datasize-cur=64M:\ 154 :stacksize-cur=32M:\ 155 :coredumpsize-cur=0:\ 156 :maxmemorysize-cur=128M:\ 157 :memorylocked=32M:\ 158 :maxproc=128:\ 159 :openfiles=256:\ 160 :tc=default: 161 162 163# 164# The dialer class should be used for a dialup PPP/SLIP accounts 165# Welcome messages/news suppressed 166# 167dialer:\ 168 :hushlogin:\ 169 :requirehome@:\ 170 :cputime=unlimited:\ 171 :filesize=2M:\ 172 :datasize=2M:\ 173 :stacksize=4M:\ 174 :coredumpsize=0:\ 175 :memoryuse=4M:\ 176 :memorylocked=1M:\ 177 :maxproc=16:\ 178 :openfiles=32:\ 179 :tc=standard: 180 181 182# 183# Site full-time 24/7 PPP/SLIP connections 184# - no time accounting, restricted to access via dialin lines 185# 186site:\ 187 :ignoretime:\ 188 :passwordperiod@:\ 189 :refreshtime@:\ 190 :refreshperiod@:\ 191 :sessionlimit@:\ 192 :autodelete@:\ 193 :expireperiod@:\ 194 :graceexpire@:\ 195 :gracetime@:\ 196 :warnexpire@:\ 197 :warnpassword@:\ 198 :idletime@:\ 199 :sessiontime@:\ 200 :daytime@:\ 201 :weektime@:\ 202 :monthtime@:\ 203 :warntime@:\ 204 :accounted@:\ 205 :tc=dialer:\ 206 :tc=staff: 207 208 209# 210# Example standard accounting entries for subscriber levels 211# 212 213subscriber|Subscribers:\ 214 :accounted:\ 215 :refreshtime=180d:\ 216 :refreshperiod@:\ 217 :sessionlimit@:\ 218 :autodelete=30d:\ 219 :expireperiod=180d:\ 220 :graceexpire=7d:\ 221 :gracetime=10m:\ 222 :warnexpire=7d:\ 223 :warnpassword=7d:\ 224 :idletime=30m:\ 225 :sessiontime=4h:\ 226 :daytime=6h:\ 227 :weektime=40h:\ 228 :monthtime=120h:\ 229 :warntime=4h:\ 230 :tc=standard: 231 232 233# 234# Subscriber accounts. These accounts have their login times 235# accounted and have access limits applied. 236# 237subppp|PPP Subscriber Accounts:\ 238 :tc=dialer:\ 239 :tc=subscriber: 240 241 242subslip|SLIP Subscriber Accounts:\ 243 :tc=dialer:\ 244 :tc=subscriber: 245 246 247subshell:Shell Subscriber Accounts:\ 248 :tc=subscriber: 249 250 251# 252# Russian Users Accounts. Setup proper environment variables. 253# 254russian:Russian Users Accounts:\ 255 :charset=KOI8-R:\ 256 :lang=ru_RU.KOI8-R:\ 257 :tc=default: 258