login.conf revision 34346
1169689Skan# Sample login.conf - login class capabilities database. 2169689Skan# To speed up access to this data, you can use /usr/bin/cap_mkdb 3169689Skan# to create a database form of this file: 4169689Skan# 5169689Skan# cap_mkdb /etc/login.conf 6169689Skan# 7169689Skan# Don't forget to do this after each edit as well! 8169689Skan# 9169689Skan# This file controls resource limits, accounting limits and 10169689Skan# default user environment settings. 11169689Skan# 12169689Skan# $Id: login.conf,v 1.19 1997/12/03 01:12:48 ache Exp $ 13169689Skan# 14169689Skan 15169689Skan 16169689Skan# Authentication methods 17169689Skan 18169689Skanauth-defaults:\ 19169689Skan :auth=krb_skey_or_passwd,passwd,kerberos,skey: 20169689Skan 21169689Skanauth-root-defaults:\ 22169689Skan :auth-login=krb_skey_or_passwd,passwd,kerberos,skey:\ 23169689Skan :auth-rlogin=krb_or_skey,kerberos,skey: 24169689Skan 25169689Skanauth-ftp-defaults:\ 26169689Skan :auth=skey_or_pwd,passwd,skey: 27169689Skan 28169689Skan 29169689Skan# Example defaults 30169689Skan# These settings are used by login(1) by default for classless users 31169689Skan# Note that entries like "cputime" set both "cputime-cur" and "cputime-max" 32169689Skan 33169689Skandefault:\ 34169689Skan :cputime=infinity:\ 35169689Skan :datasize-cur=22M:\ 36169689Skan :stacksize-cur=8M:\ 37169689Skan :memorylocked-cur=10M:\ 38169689Skan :memoryuse-cur=30M:\ 39169689Skan :filesize=infinity:\ 40169689Skan :coredumpsize=infinity:\ 41169689Skan :maxproc-cur=64:\ 42169689Skan :openfiles-cur=64:\ 43169689Skan :priority=0:\ 44169689Skan :requirehome@:\ 45169689Skan :umask=022:\ 46169689Skan :tc=auth-defaults: 47169689Skan 48169689Skan 49169689Skan# 50169689Skan# standard - standard user defaults 51169689Skan# 52169689Skanstandard:\ 53169689Skan :copyright=/etc/COPYRIGHT:\ 54169689Skan :welcome=/etc/motd:\ 55169689Skan :setenv=MAIL=/var/mail/$,BLOCKSIZE=K,EDITOR=/usr/bin/ee:\ 56169689Skan :path=~/bin /bin /usr/bin /usr/local/bin:\ 57169689Skan :manpath=/usr/share/man /usr/local/man:\ 58169689Skan :nologin=/etc/nologin:\ 59169689Skan :cputime=1h30m:\ 60169689Skan :datasize=8M:\ 61169689Skan :stacksize=2M:\ 62169689Skan :memorylocked=4M:\ 63169689Skan :memoryuse=8M:\ 64169689Skan :filesize=8M:\ 65169689Skan :coredumpsize=8M:\ 66169689Skan :openfiles=24:\ 67169689Skan :maxproc=32:\ 68169689Skan :priority=0:\ 69169689Skan :requirehome:\ 70169689Skan :passwordperiod=90d:\ 71169689Skan :umask=002:\ 72169689Skan :ignoretime@:\ 73169689Skan :tc=default: 74169689Skan 75169689Skan 76169689Skan# 77169689Skan# users of X (needs more resources!) 78169689Skan# 79169689Skanxuser:\ 80169689Skan :manpath=/usr/share/man /usr/X11R6/man /usr/local/man:\ 81169689Skan :cputime=4h:\ 82169689Skan :datasize=12M:\ 83169689Skan :stacksize=4M:\ 84169689Skan :filesize=8M:\ 85169689Skan :memoryuse=16M:\ 86169689Skan :openfiles=32:\ 87169689Skan :maxproc=48:\ 88169689Skan :tc=standard: 89169689Skan 90169689Skan 91169689Skan# 92169689Skan# Staff users - few restrictions and allow login anytime 93169689Skan# 94169689Skanstaff:\ 95169689Skan :ignorenologin:\ 96169689Skan :ignoretime:\ 97169689Skan :requirehome@:\ 98169689Skan :accounted@:\ 99169689Skan :path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 100169689Skan :umask=022:\ 101169689Skan :tc=standard: 102169689Skan 103169689Skan 104169689Skan# 105169689Skan# root - fallback for root logins 106169689Skan# 107169689Skanroot:\ 108169689Skan :path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 109169689Skan :cputime=infinity:\ 110169689Skan :datasize=infinity:\ 111169689Skan :stacksize=infinity:\ 112169689Skan :memorylocked=infinity:\ 113169689Skan :memoryuse=infinity:\ 114169689Skan :filesize=infinity:\ 115169689Skan :coredumpsize=infinity:\ 116169689Skan :openfiles=infinity:\ 117169689Skan :maxproc=infinity:\ 118169689Skan :memoryuse-cur=32M:\ 119169689Skan :maxproc-cur=64:\ 120169689Skan :openfiles-cur=1024:\ 121169689Skan :priority=0:\ 122169689Skan :requirehome@:\ 123169689Skan :umask=022:\ 124169689Skan :tc=auth-root-defaults: 125169689Skan 126169689Skan 127169689Skan# 128169689Skan# Settings used by /etc/rc 129169689Skan# 130169689Skandaemon:\ 131169689Skan :coredumpsize@:\ 132169689Skan :coredumpsize-cur=0:\ 133169689Skan :datasize=infinity:\ 134169689Skan :datasize-cur@:\ 135169689Skan :maxproc=512:\ 136169689Skan :maxproc-cur@:\ 137169689Skan :memoryuse-cur=64M:\ 138169689Skan :memorylocked-cur=64M:\ 139169689Skan :openfiles=1024:\ 140169689Skan :openfiles-cur@:\ 141169689Skan :stacksize=16M:\ 142169689Skan :stacksize-cur@:\ 143169689Skan :tc=default: 144169689Skan 145169689Skan 146169689Skan# 147169689Skan# Settings used by news subsystem 148169689Skan# 149169689Skannews:\ 150169689Skan :path=/usr/local/news/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 151169689Skan :cputime=infinity:\ 152169689Skan :filesize=128M:\ 153169689Skan :datasize-cur=64M:\ 154169689Skan :stacksize-cur=32M:\ 155169689Skan :coredumpsize-cur=0:\ 156169689Skan :maxmemorysize-cur=128M:\ 157169689Skan :memorylocked=32M:\ 158169689Skan :maxproc=128:\ 159169689Skan :openfiles=256:\ 160169689Skan :tc=default: 161169689Skan 162169689Skan 163169689Skan# 164169689Skan# The dialer class should be used for a dialup PPP/SLIP accounts 165169689Skan# Welcome messages/news suppressed 166169689Skan# 167169689Skandialer:\ 168169689Skan :hushlogin:\ 169169689Skan :requirehome@:\ 170169689Skan :cputime=unlimited:\ 171169689Skan :filesize=2M:\ 172169689Skan :datasize=2M:\ 173169689Skan :stacksize=4M:\ 174169689Skan :coredumpsize=0:\ 175169689Skan :memoryuse=4M:\ 176169689Skan :memorylocked=1M:\ 177169689Skan :maxproc=16:\ 178169689Skan :openfiles=32:\ 179169689Skan :tc=standard: 180169689Skan 181169689Skan 182169689Skan# 183169689Skan# Site full-time 24/7 PPP/SLIP connections 184169689Skan# - no time accounting, restricted to access via dialin lines 185169689Skan# 186169689Skansite:\ 187169689Skan :ignoretime:\ 188169689Skan :passwordperiod@:\ 189169689Skan :refreshtime@:\ 190169689Skan :refreshperiod@:\ 191169689Skan :sessionlimit@:\ 192169689Skan :autodelete@:\ 193169689Skan :expireperiod@:\ 194169689Skan :graceexpire@:\ 195169689Skan :gracetime@:\ 196169689Skan :warnexpire@:\ 197169689Skan :warnpassword@:\ 198169689Skan :idletime@:\ 199169689Skan :sessiontime@:\ 200169689Skan :daytime@:\ 201169689Skan :weektime@:\ 202169689Skan :monthtime@:\ 203169689Skan :warntime@:\ 204169689Skan :accounted@:\ 205169689Skan :tc=dialer:\ 206169689Skan :tc=staff: 207169689Skan 208169689Skan 209169689Skan# 210169689Skan# Example standard accounting entries for subscriber levels 211169689Skan# 212169689Skan 213169689Skansubscriber|Subscribers:\ 214169689Skan :accounted:\ 215169689Skan :refreshtime=180d:\ 216169689Skan :refreshperiod@:\ 217169689Skan :sessionlimit@:\ 218169689Skan :autodelete=30d:\ 219169689Skan :expireperiod=180d:\ 220169689Skan :graceexpire=7d:\ 221169689Skan :gracetime=10m:\ 222169689Skan :warnexpire=7d:\ 223169689Skan :warnpassword=7d:\ 224169689Skan :idletime=30m:\ 225169689Skan :sessiontime=4h:\ 226169689Skan :daytime=6h:\ 227169689Skan :weektime=40h:\ 228169689Skan :monthtime=120h:\ 229169689Skan :warntime=4h:\ 230169689Skan :tc=standard: 231169689Skan 232169689Skan 233169689Skan# 234169689Skan# Subscriber accounts. These accounts have their login times 235169689Skan# accounted and have access limits applied. 236169689Skan# 237169689Skansubppp|PPP Subscriber Accounts:\ 238169689Skan :tc=dialer:\ 239169689Skan :tc=subscriber: 240169689Skan 241169689Skan 242169689Skansubslip|SLIP Subscriber Accounts:\ 243169689Skan :tc=dialer:\ 244169689Skan :tc=subscriber: 245169689Skan 246169689Skan 247169689Skansubshell:Shell Subscriber Accounts:\ 248169689Skan :tc=subscriber: 249169689Skan 250169689Skan 251169689Skan# 252169689Skan# Russian Users Accounts. Setup proper environment variables. 253169689Skan# 254169689Skanrussian:Russian Users Accounts:\ 255169689Skan :charset=KOI8-R:\ 256169689Skan :lang=ru_RU.KOI8-R:\ 257169689Skan :tc=default: 258169689Skan