login.conf revision 31506
1211440Sadrian# Sample login.conf - login class capabilities database. 2211440Sadrian# To speed up access to this data, you can use /usr/bin/cap_mkdb 3211440Sadrian# to create a database form of this file: 4211440Sadrian# 5211440Sadrian# cap_mkdb /etc/login.conf 6211440Sadrian# 7211440Sadrian# Don't forget to do this after each edit as well! 8211440Sadrian# 9211440Sadrian# This file controls resource limits, accounting limits and 10211440Sadrian# default user environment settings. 11211440Sadrian# 12211440Sadrian# $Id: login.conf,v 1.18 1997/12/01 21:18:39 obrien Exp $ 13211440Sadrian# 14211440Sadrian 15211440Sadrian 16211440Sadrian# Authentication methods 17211440Sadrian 18211440Sadrianauth-defaults:\ 19211440Sadrian :auth=krb_skey_or_passwd,passwd,kerberos,skey: 20211440Sadrian 21211440Sadrianauth-root-defaults:\ 22211440Sadrian :auth-login=krb_skey_or_passwd,passwd,kerberos,skey:\ 23211440Sadrian :auth-rlogin=krb_or_skey,kerberos,skey:\ 24211440Sadrian 25211440Sadrianauth-ftp-defaults:\ 26211440Sadrian :auth=skey_or_pwd,passwd,skey: 27211440Sadrian 28211440Sadrian 29211440Sadrian# Example defaults 30211440Sadrian# These settings are used by login(1) by default for classless users 31211440Sadrian# Note that entries like "cputime" set both "cputime-cur" and "cputime-max" 32211440Sadrian 33211440Sadriandefault:\ 34211440Sadrian :cputime=infinity:\ 35211440Sadrian :datasize-cur=22M:\ 36211440Sadrian :stacksize-cur=8M:\ 37211440Sadrian :memorylocked-cur=10M:\ 38211440Sadrian :memoryuse-cur=30M:\ 39211440Sadrian :filesize=infinity:\ 40211440Sadrian :coredumpsize=infinity:\ 41211440Sadrian :maxproc-cur=64:\ 42211440Sadrian :openfiles-cur=64:\ 43211440Sadrian :priority=0:\ 44211440Sadrian :requirehome@:\ 45211440Sadrian :umask=022:\ 46211440Sadrian :tc=auth-defaults: 47211440Sadrian 48211440Sadrian 49211440Sadrian# 50211440Sadrian# standard - standard user defaults 51211440Sadrian# 52211440Sadrianstandard:\ 53211440Sadrian :copyright=/etc/COPYRIGHT:\ 54211440Sadrian :welcome=/etc/motd:\ 55211440Sadrian :setenv=MAIL=/var/mail/$,BLOCKSIZE=K,EDITOR=/usr/bin/ee:\ 56211440Sadrian :path=~/bin /bin /usr/bin /usr/local/bin:\ 57211440Sadrian :manpath=/usr/share/man /usr/local/man:\ 58211440Sadrian :nologin=/etc/nologin:\ 59211440Sadrian :cputime=1h30m:\ 60211440Sadrian :datasize=8M:\ 61211440Sadrian :stacksize=2M:\ 62211440Sadrian :memorylocked=4M:\ 63211440Sadrian :memoryuse=8M:\ 64211440Sadrian :filesize=8M:\ 65211440Sadrian :coredumpsize=8M:\ 66211440Sadrian :openfiles=24:\ 67211440Sadrian :maxproc=32:\ 68211440Sadrian :priority=0:\ 69211440Sadrian :requirehome:\ 70211440Sadrian :passwordperiod=90d:\ 71211440Sadrian :umask=002:\ 72211440Sadrian :ignoretime@:\ 73211440Sadrian :tc=default: 74211440Sadrian 75211440Sadrian 76211440Sadrian# 77211440Sadrian# users of X (needs more resources!) 78211440Sadrian# 79211440Sadrianxuser:\ 80211440Sadrian :manpath=/usr/share/man /usr/X11R6/man /usr/local/man:\ 81211440Sadrian :cputime=4h:\ 82 :datasize=12M:\ 83 :stacksize=4M:\ 84 :filesize=8M:\ 85 :memoryuse=16M:\ 86 :openfiles=32:\ 87 :maxproc=48:\ 88 :tc=standard: 89 90 91# 92# Staff users - few restrictions and allow login anytime 93# 94staff:\ 95 :ignorenologin:\ 96 :ignoretime:\ 97 :requirehome@:\ 98 :accounted@:\ 99 :path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 100 :umask=022:\ 101 :tc=standard: 102 103 104# 105# root - fallback for root logins 106# 107root:\ 108 :path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 109 :cputime=infinity:\ 110 :datasize=infinity:\ 111 :stacksize=infinity:\ 112 :memorylocked=infinity:\ 113 :memoryuse=infinity:\ 114 :filesize=infinity:\ 115 :coredumpsize=infinity:\ 116 :openfiles=infinity:\ 117 :maxproc=infinity:\ 118 :memoryuse-cur=32M:\ 119 :maxproc-cur=64:\ 120 :openfiles-cur=1024:\ 121 :priority=0:\ 122 :requirehome@:\ 123 :umask=022:\ 124 :tc=auth-root-defaults:\ 125 126 127# 128# Settings used by /etc/rc 129# 130daemon:\ 131 :coredumpsize@:\ 132 :coredumpsize-cur=0:\ 133 :datasize=infinity:\ 134 :datasize-cur@:\ 135 :maxproc=512:\ 136 :maxproc-cur@:\ 137 :memoryuse-cur=64M:\ 138 :memorylocked-cur=64M:\ 139 :openfiles=1024:\ 140 :openfiles-cur@:\ 141 :stacksize=16M:\ 142 :stacksize-cur@:\ 143 :tc=default: 144 145 146# 147# Settings used by news subsystem 148# 149news:\ 150 :path=/usr/local/news/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 151 :cputime=infinity:\ 152 :filesize=128M:\ 153 :datasize-cur=64M:\ 154 :stacksize-cur=32M:\ 155 :coredumpsize-cur=0:\ 156 :maxmemorysize-cur=128M:\ 157 :memorylocked=32M:\ 158 :maxproc=128:\ 159 :openfiles=256:\ 160 :tc=default: 161 162 163# 164# The dialer class should be used for a dialup PPP/SLIP accounts 165# Welcome messages/news suppressed 166# 167dialer:\ 168 :hushlogin:\ 169 :requirehome@:\ 170 :cputime=unlimited:\ 171 :filesize=2M:\ 172 :datasize=2M:\ 173 :stacksize=4M:\ 174 :coredumpsize=0:\ 175 :memoryuse=4M:\ 176 :memorylocked=1M:\ 177 :maxproc=16:\ 178 :openfiles=32:\ 179 :tc=standard: 180 181 182# 183# Site full-time 24/7 PPP/SLIP connections 184# - no time accounting, restricted to access via dialin lines 185# 186site:\ 187 :ignoretime:\ 188 :passwordperiod@:\ 189 :refreshtime@:\ 190 :refreshperiod@:\ 191 :sessionlimit@:\ 192 :autodelete@:\ 193 :expireperiod@:\ 194 :graceexpire@:\ 195 :gracetime@:\ 196 :warnexpire@:\ 197 :warnpassword@:\ 198 :idletime@:\ 199 :sessiontime@:\ 200 :daytime@:\ 201 :weektime@:\ 202 :monthtime@:\ 203 :warntime@:\ 204 :accounted@:\ 205 :tc=dialer:\ 206 :tc=staff: 207 208 209# 210# Example standard accounting entries for subscriber levels 211# 212 213subscriber|Subscribers:\ 214 :accounted:\ 215 :refreshtime=180d:\ 216 :refreshperiod@:\ 217 :sessionlimit@:\ 218 :autodelete=30d:\ 219 :expireperiod=180d:\ 220 :graceexpire=7d:\ 221 :gracetime=10m:\ 222 :warnexpire=7d:\ 223 :warnpassword=7d:\ 224 :idletime=30m:\ 225 :sessiontime=4h:\ 226 :daytime=6h:\ 227 :weektime=40h:\ 228 :monthtime=120h:\ 229 :warntime=4h:\ 230 :tc=standard: 231 232 233# 234# Subscriber accounts. These accounts have their login times 235# accounted and have access limits applied. 236# 237subppp|PPP Subscriber Accounts:\ 238 :tc=dialer:\ 239 :tc=subscriber: 240 241 242subslip|SLIP Subscriber Accounts:\ 243 :tc=dialer:\ 244 :tc=subscriber: 245 246 247subshell:Shell Subscriber Accounts:\ 248 :tc=subscriber: 249 250 251# 252# Russian Users Accounts. Setup proper environment variables. 253# 254russian:Russian Users Accounts:\ 255 :charset=KOI8-R:\ 256 :lang=ru_RU.KOI8-R:\ 257 :tc=default: 258