login.conf revision 39424
121526Sdavidn# Sample login.conf - login class capabilities database. 225901Sgpalmer# To speed up access to this data, you can use /usr/bin/cap_mkdb 321526Sdavidn# to create a database form of this file: 421526Sdavidn# 521526Sdavidn# cap_mkdb /etc/login.conf 621526Sdavidn# 721526Sdavidn# Don't forget to do this after each edit as well! 821526Sdavidn# 921526Sdavidn# This file controls resource limits, accounting limits and 1021526Sdavidn# default user environment settings. 1121526Sdavidn# 1239424Sdt# $Id: login.conf,v 1.21 1998/09/16 19:18:36 msmith Exp $ 1321526Sdavidn# 1421526Sdavidn 1539375Smsmith# Default settings effectively disable resource limits, see the 1639375Smsmith# examples below for a starting point to enable them. 1721526Sdavidn 1821526Sdavidn# Example defaults 1921526Sdavidn# These settings are used by login(1) by default for classless users 2021526Sdavidn# Note that entries like "cputime" set both "cputime-cur" and "cputime-max" 2121526Sdavidn 2221526Sdavidndefault:\ 2321526Sdavidn :copyright=/etc/COPYRIGHT:\ 2421526Sdavidn :welcome=/etc/motd:\ 2521943Sdavidn :setenv=MAIL=/var/mail/$,BLOCKSIZE=K,EDITOR=/usr/bin/ee:\ 2621526Sdavidn :path=~/bin /bin /usr/bin /usr/local/bin:\ 2721538Sdavidn :manpath=/usr/share/man /usr/local/man:\ 2821526Sdavidn :nologin=/etc/nologin:\ 2939375Smsmith :cputime=unlimited:\ 3039375Smsmith :datasize=unlimited:\ 3139375Smsmith :stacksize=unlimited:\ 3239375Smsmith :memorylocked=unlimited:\ 3339375Smsmith :memoryuse=unlimited:\ 3439375Smsmith :filesize=unlimited:\ 3539375Smsmith :coredumpsize=unlimited:\ 3639375Smsmith :openfiles=unlimited:\ 3739375Smsmith :maxproc=unlimited:\ 3821538Sdavidn :priority=0:\ 3921526Sdavidn :ignoretime@:\ 4039375Smsmith :umask=022: 4121526Sdavidn 4221943Sdavidn 4321538Sdavidn# 4439375Smsmith# A collection of common class names - forward them all to 'default' 4539375Smsmith# (login would normally do this anyway, but having a class name 4639375Smsmith# here suppresses the diagnostic) 4721538Sdavidn# 4839375Smsmithstandard:\ 4939375Smsmith :tc=default: 5021538Sdavidnxuser:\ 5139375Smsmith :tc=default: 5221526Sdavidnstaff:\ 5339375Smsmith :tc=default: 5439375Smsmithdaemon:\ 5539424Sdt :tc=default: 5639375Smsmithnews:\ 5739375Smsmith :tc=default: 5839375Smsmithdialer:\ 5939375Smsmith :tc=default: 6021526Sdavidn 6121526Sdavidn# 6239375Smsmith# Root can always login 6321526Sdavidn# 6421526Sdavidnroot:\ 6539375Smsmith :ignorenologin:\ 6639375Smsmith :tc=default: 6721526Sdavidn 6821526Sdavidn# 6939375Smsmith# Russian Users Accounts. Setup proper environment variables. 7021526Sdavidn# 7139375Smsmithrussian:Russian Users Accounts:\ 7239375Smsmith :charset=KOI8-R:\ 7339375Smsmith :lang=ru_RU.KOI8-R:\ 7421526Sdavidn :tc=default: 7521526Sdavidn 7621526Sdavidn 7739375Smsmith###################################################################### 7839375Smsmith###################################################################### 7939375Smsmith## 8039375Smsmith## Example entries 8139375Smsmith## 8239375Smsmith###################################################################### 8339375Smsmith###################################################################### 8439375Smsmith 8539375Smsmith## Authentication methods 8639375Smsmith## Note that these are disabled by default, and libutil must 8739375Smsmith## be rebuilt with LOGIN_CAP_AUTH defined to use them. 8821526Sdavidn# 8939375Smsmith#auth-defaults:\ 9039375Smsmith# :auth=krb_skey_or_passwd,passwd,kerberos,skey: 9121526Sdavidn# 9239375Smsmith#auth-root-defaults:\ 9339375Smsmith# :auth-login=krb_skey_or_passwd,passwd,kerberos,skey:\ 9439375Smsmith# :auth-rlogin=krb_or_skey,kerberos,skey: 9521526Sdavidn# 9639375Smsmith#auth-ftp-defaults:\ 9739375Smsmith# :auth=skey_or_pwd,passwd,skey: 9821526Sdavidn# 9921526Sdavidn# 10039375Smsmith## Example defaults 10139375Smsmith## These settings are used by login(1) by default for classless users 10239375Smsmith## Note that entries like "cputime" set both "cputime-cur" and "cputime-max" 10321526Sdavidn# 10439375Smsmith#default:\ 10539375Smsmith# :cputime=infinity:\ 10639375Smsmith# :datasize-cur=22M:\ 10739375Smsmith# :stacksize-cur=8M:\ 10839375Smsmith# :memorylocked-cur=10M:\ 10939375Smsmith# :memoryuse-cur=30M:\ 11039375Smsmith# :filesize=infinity:\ 11139375Smsmith# :coredumpsize=infinity:\ 11239375Smsmith# :maxproc-cur=64:\ 11339375Smsmith# :openfiles-cur=64:\ 11439375Smsmith# :priority=0:\ 11539375Smsmith# :requirehome@:\ 11639375Smsmith# :umask=022:\ 11739375Smsmith# :tc=auth-defaults: 11821526Sdavidn# 11921526Sdavidn# 12039375Smsmith## 12139375Smsmith## standard - standard user defaults 12239375Smsmith## 12339375Smsmith#standard:\ 12439375Smsmith# :copyright=/etc/COPYRIGHT:\ 12539375Smsmith# :welcome=/etc/motd:\ 12639375Smsmith# :setenv=MAIL=/var/mail/$,BLOCKSIZE=K,EDITOR=/usr/bin/ee:\ 12739375Smsmith# :path=~/bin /bin /usr/bin /usr/local/bin:\ 12839375Smsmith# :manpath=/usr/share/man /usr/local/man:\ 12939375Smsmith# :nologin=/etc/nologin:\ 13039375Smsmith# :cputime=1h30m:\ 13139375Smsmith# :datasize=8M:\ 13239375Smsmith# :stacksize=2M:\ 13339375Smsmith# :memorylocked=4M:\ 13439375Smsmith# :memoryuse=8M:\ 13539375Smsmith# :filesize=8M:\ 13639375Smsmith# :coredumpsize=8M:\ 13739375Smsmith# :openfiles=24:\ 13839375Smsmith# :maxproc=32:\ 13939375Smsmith# :priority=0:\ 14039375Smsmith# :requirehome:\ 14139375Smsmith# :passwordperiod=90d:\ 14239375Smsmith# :umask=002:\ 14339375Smsmith# :ignoretime@:\ 14439375Smsmith# :tc=default: 14521526Sdavidn# 14621526Sdavidn# 14739375Smsmith## 14839375Smsmith## users of X (needs more resources!) 14939375Smsmith## 15039375Smsmith#xuser:\ 15139375Smsmith# :manpath=/usr/share/man /usr/X11R6/man /usr/local/man:\ 15239375Smsmith# :cputime=4h:\ 15339375Smsmith# :datasize=12M:\ 15439375Smsmith# :stacksize=4M:\ 15539375Smsmith# :filesize=8M:\ 15639375Smsmith# :memoryuse=16M:\ 15739375Smsmith# :openfiles=32:\ 15839375Smsmith# :maxproc=48:\ 15939375Smsmith# :tc=standard: 16025369Sache# 16125369Sache# 16239375Smsmith## 16339375Smsmith## Staff users - few restrictions and allow login anytime 16439375Smsmith## 16539375Smsmith#staff:\ 16639375Smsmith# :ignorenologin:\ 16739375Smsmith# :ignoretime:\ 16839375Smsmith# :requirehome@:\ 16939375Smsmith# :accounted@:\ 17039375Smsmith# :path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 17139375Smsmith# :umask=022:\ 17239375Smsmith# :tc=standard: 17339375Smsmith# 17439375Smsmith# 17539375Smsmith## 17639375Smsmith## root - fallback for root logins 17739375Smsmith## 17839375Smsmith#root:\ 17939375Smsmith# :path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 18039375Smsmith# :cputime=infinity:\ 18139375Smsmith# :datasize=infinity:\ 18239375Smsmith# :stacksize=infinity:\ 18339375Smsmith# :memorylocked=infinity:\ 18439375Smsmith# :memoryuse=infinity:\ 18539375Smsmith# :filesize=infinity:\ 18639375Smsmith# :coredumpsize=infinity:\ 18739375Smsmith# :openfiles=infinity:\ 18839375Smsmith# :maxproc=infinity:\ 18939375Smsmith# :memoryuse-cur=32M:\ 19039375Smsmith# :maxproc-cur=64:\ 19139375Smsmith# :openfiles-cur=1024:\ 19239375Smsmith# :priority=0:\ 19339375Smsmith# :requirehome@:\ 19439375Smsmith# :umask=022:\ 19539375Smsmith# :tc=auth-root-defaults: 19639375Smsmith# 19739375Smsmith# 19839375Smsmith## 19939375Smsmith## Settings used by /etc/rc 20039375Smsmith## 20139375Smsmith#daemon:\ 20239375Smsmith# :coredumpsize@:\ 20339375Smsmith# :coredumpsize-cur=0:\ 20439375Smsmith# :datasize=infinity:\ 20539375Smsmith# :datasize-cur@:\ 20639375Smsmith# :maxproc=512:\ 20739375Smsmith# :maxproc-cur@:\ 20839375Smsmith# :memoryuse-cur=64M:\ 20939375Smsmith# :memorylocked-cur=64M:\ 21039375Smsmith# :openfiles=1024:\ 21139375Smsmith# :openfiles-cur@:\ 21239375Smsmith# :stacksize=16M:\ 21339375Smsmith# :stacksize-cur@:\ 21439375Smsmith# :tc=default: 21539375Smsmith# 21639375Smsmith# 21739375Smsmith## 21839375Smsmith## Settings used by news subsystem 21939375Smsmith## 22039375Smsmith#news:\ 22139375Smsmith# :path=/usr/local/news/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 22239375Smsmith# :cputime=infinity:\ 22339375Smsmith# :filesize=128M:\ 22439375Smsmith# :datasize-cur=64M:\ 22539375Smsmith# :stacksize-cur=32M:\ 22639375Smsmith# :coredumpsize-cur=0:\ 22739375Smsmith# :maxmemorysize-cur=128M:\ 22839375Smsmith# :memorylocked=32M:\ 22939375Smsmith# :maxproc=128:\ 23039375Smsmith# :openfiles=256:\ 23139375Smsmith# :tc=default: 23239375Smsmith# 23339375Smsmith# 23439375Smsmith## 23539375Smsmith## The dialer class should be used for a dialup PPP/SLIP accounts 23639375Smsmith## Welcome messages/news suppressed 23739375Smsmith## 23839375Smsmith#dialer:\ 23939375Smsmith# :hushlogin:\ 24039375Smsmith# :requirehome@:\ 24139375Smsmith# :cputime=unlimited:\ 24239375Smsmith# :filesize=2M:\ 24339375Smsmith# :datasize=2M:\ 24439375Smsmith# :stacksize=4M:\ 24539375Smsmith# :coredumpsize=0:\ 24639375Smsmith# :memoryuse=4M:\ 24739375Smsmith# :memorylocked=1M:\ 24839375Smsmith# :maxproc=16:\ 24939375Smsmith# :openfiles=32:\ 25039375Smsmith# :tc=standard: 25139375Smsmith# 25239375Smsmith# 25339375Smsmith## 25439375Smsmith## Site full-time 24/7 PPP/SLIP connections 25539375Smsmith## - no time accounting, restricted to access via dialin lines 25639375Smsmith## 25739375Smsmith#site:\ 25839375Smsmith# :ignoretime:\ 25939375Smsmith# :passwordperiod@:\ 26039375Smsmith# :refreshtime@:\ 26139375Smsmith# :refreshperiod@:\ 26239375Smsmith# :sessionlimit@:\ 26339375Smsmith# :autodelete@:\ 26439375Smsmith# :expireperiod@:\ 26539375Smsmith# :graceexpire@:\ 26639375Smsmith# :gracetime@:\ 26739375Smsmith# :warnexpire@:\ 26839375Smsmith# :warnpassword@:\ 26939375Smsmith# :idletime@:\ 27039375Smsmith# :sessiontime@:\ 27139375Smsmith# :daytime@:\ 27239375Smsmith# :weektime@:\ 27339375Smsmith# :monthtime@:\ 27439375Smsmith# :warntime@:\ 27539375Smsmith# :accounted@:\ 27639375Smsmith# :tc=dialer:\ 27739375Smsmith# :tc=staff: 27839375Smsmith# 27939375Smsmith# 28039375Smsmith## 28139375Smsmith## Example standard accounting entries for subscriber levels 28239375Smsmith## 28339375Smsmith# 28439375Smsmith#subscriber|Subscribers:\ 28539375Smsmith# :accounted:\ 28639375Smsmith# :refreshtime=180d:\ 28739375Smsmith# :refreshperiod@:\ 28839375Smsmith# :sessionlimit@:\ 28939375Smsmith# :autodelete=30d:\ 29039375Smsmith# :expireperiod=180d:\ 29139375Smsmith# :graceexpire=7d:\ 29239375Smsmith# :gracetime=10m:\ 29339375Smsmith# :warnexpire=7d:\ 29439375Smsmith# :warnpassword=7d:\ 29539375Smsmith# :idletime=30m:\ 29639375Smsmith# :sessiontime=4h:\ 29739375Smsmith# :daytime=6h:\ 29839375Smsmith# :weektime=40h:\ 29939375Smsmith# :monthtime=120h:\ 30039375Smsmith# :warntime=4h:\ 30139375Smsmith# :tc=standard: 30239375Smsmith# 30339375Smsmith# 30439375Smsmith## 30539375Smsmith## Subscriber accounts. These accounts have their login times 30639375Smsmith## accounted and have access limits applied. 30739375Smsmith## 30839375Smsmith#subppp|PPP Subscriber Accounts:\ 30939375Smsmith# :tc=dialer:\ 31039375Smsmith# :tc=subscriber: 31139375Smsmith# 31239375Smsmith# 31339375Smsmith#subslip|SLIP Subscriber Accounts:\ 31439375Smsmith# :tc=dialer:\ 31539375Smsmith# :tc=subscriber: 31639375Smsmith# 31739375Smsmith# 31839375Smsmith#subshell:Shell Subscriber Accounts:\ 31939375Smsmith# :tc=subscriber: 32039375Smsmith# 32139375Smsmith# 32239375Smsmith## 32339375Smsmith## Russian Users Accounts. Setup proper environment variables. 32439375Smsmith## 32539375Smsmith#russian:Russian Users Accounts:\ 32639375Smsmith# :charset=KOI8-R:\ 32739375Smsmith# :lang=ru_RU.KOI8-R:\ 32839375Smsmith# :tc=default: