login.conf revision 91527
158579Srwatson# login.conf - login class capabilities database. 221526Sdavidn# 358579Srwatson# Remember to rebuild the database after each change to this file: 458579Srwatson# 521526Sdavidn# cap_mkdb /etc/login.conf 621526Sdavidn# 721526Sdavidn# This file controls resource limits, accounting limits and 821526Sdavidn# default user environment settings. 921526Sdavidn# 1050472Speter# $FreeBSD: head/etc/login.conf 91527 2002-03-01 15:30:24Z rwatson $ 1121526Sdavidn# 1221526Sdavidn 1339375Smsmith# Default settings effectively disable resource limits, see the 1439375Smsmith# examples below for a starting point to enable them. 1521526Sdavidn 1642149Shoek# defaults 1721526Sdavidn# These settings are used by login(1) by default for classless users 1821526Sdavidn# Note that entries like "cputime" set both "cputime-cur" and "cputime-max" 1921526Sdavidn 2021526Sdavidndefault:\ 2169015Sobrien :passwd_format=md5:\ 2270189Srwatson :copyright=/etc/COPYRIGHT:\ 2321526Sdavidn :welcome=/etc/motd:\ 2487887Smikeh :setenv=MAIL=/var/mail/$,BLOCKSIZE=K,FTP_PASSIVE_MODE=YES:\ 2558579Srwatson :path=/sbin /bin /usr/sbin /usr/bin /usr/games /usr/local/sbin /usr/local/bin /usr/X11R6/bin ~/bin:\ 2642515Sasami :nologin=/var/run/nologin:\ 2739375Smsmith :cputime=unlimited:\ 2839375Smsmith :datasize=unlimited:\ 2939375Smsmith :stacksize=unlimited:\ 3039375Smsmith :memorylocked=unlimited:\ 3139375Smsmith :memoryuse=unlimited:\ 3239375Smsmith :filesize=unlimited:\ 3339375Smsmith :coredumpsize=unlimited:\ 3439375Smsmith :openfiles=unlimited:\ 3539375Smsmith :maxproc=unlimited:\ 3661184Salfred :sbsize=unlimited:\ 3721538Sdavidn :priority=0:\ 3821526Sdavidn :ignoretime@:\ 3939375Smsmith :umask=022: 4021526Sdavidn 4121943Sdavidn 4221538Sdavidn# 4339375Smsmith# A collection of common class names - forward them all to 'default' 4439375Smsmith# (login would normally do this anyway, but having a class name 4539375Smsmith# here suppresses the diagnostic) 4621538Sdavidn# 4739375Smsmithstandard:\ 4839375Smsmith :tc=default: 4921538Sdavidnxuser:\ 5039375Smsmith :tc=default: 5121526Sdavidnstaff:\ 5239375Smsmith :tc=default: 5339375Smsmithdaemon:\ 5439424Sdt :tc=default: 5539375Smsmithnews:\ 5639375Smsmith :tc=default: 5739375Smsmithdialer:\ 5839375Smsmith :tc=default: 5921526Sdavidn 6021526Sdavidn# 6139375Smsmith# Root can always login 6221526Sdavidn# 6348814Snik# N.B. login_getpwclass(3) will use this entry for the root account, 6448814Snik# in preference to 'default'. 6521526Sdavidnroot:\ 6639375Smsmith :ignorenologin:\ 6739375Smsmith :tc=default: 6821526Sdavidn 6921526Sdavidn# 7039375Smsmith# Russian Users Accounts. Setup proper environment variables. 7121526Sdavidn# 7291527Srwatsonrussian|Russian Users Accounts:\ 7339375Smsmith :charset=KOI8-R:\ 7439375Smsmith :lang=ru_RU.KOI8-R:\ 7521526Sdavidn :tc=default: 7621526Sdavidn 7721526Sdavidn 7839375Smsmith###################################################################### 7939375Smsmith###################################################################### 8039375Smsmith## 8139375Smsmith## Example entries 8239375Smsmith## 8339375Smsmith###################################################################### 8439375Smsmith###################################################################### 8539375Smsmith 8639375Smsmith## Example defaults 8739375Smsmith## These settings are used by login(1) by default for classless users 8839375Smsmith## Note that entries like "cputime" set both "cputime-cur" and "cputime-max" 8921526Sdavidn# 9039375Smsmith#default:\ 9139375Smsmith# :cputime=infinity:\ 9239375Smsmith# :datasize-cur=22M:\ 9339375Smsmith# :stacksize-cur=8M:\ 9439375Smsmith# :memorylocked-cur=10M:\ 9539375Smsmith# :memoryuse-cur=30M:\ 9639375Smsmith# :filesize=infinity:\ 9739375Smsmith# :coredumpsize=infinity:\ 9839375Smsmith# :maxproc-cur=64:\ 9939375Smsmith# :openfiles-cur=64:\ 10039375Smsmith# :priority=0:\ 10139375Smsmith# :requirehome@:\ 10239375Smsmith# :umask=022:\ 10339375Smsmith# :tc=auth-defaults: 10421526Sdavidn# 10521526Sdavidn# 10639375Smsmith## 10739375Smsmith## standard - standard user defaults 10839375Smsmith## 10939375Smsmith#standard:\ 11070189Srwatson# :copyright=/etc/COPYRIGHT:\ 11139375Smsmith# :welcome=/etc/motd:\ 11243220Sdg# :setenv=MAIL=/var/mail/$,BLOCKSIZE=K:\ 11339375Smsmith# :path=~/bin /bin /usr/bin /usr/local/bin:\ 11439375Smsmith# :manpath=/usr/share/man /usr/local/man:\ 11542587Sasami# :nologin=/var/run/nologin:\ 11639375Smsmith# :cputime=1h30m:\ 11739375Smsmith# :datasize=8M:\ 11839375Smsmith# :stacksize=2M:\ 11939375Smsmith# :memorylocked=4M:\ 12039375Smsmith# :memoryuse=8M:\ 12139375Smsmith# :filesize=8M:\ 12239375Smsmith# :coredumpsize=8M:\ 12339375Smsmith# :openfiles=24:\ 12439375Smsmith# :maxproc=32:\ 12539375Smsmith# :priority=0:\ 12639375Smsmith# :requirehome:\ 12746209Shoek# :passwordtime=90d:\ 12839375Smsmith# :umask=002:\ 12939375Smsmith# :ignoretime@:\ 13039375Smsmith# :tc=default: 13121526Sdavidn# 13221526Sdavidn# 13339375Smsmith## 13439375Smsmith## users of X (needs more resources!) 13539375Smsmith## 13639375Smsmith#xuser:\ 13739375Smsmith# :manpath=/usr/share/man /usr/X11R6/man /usr/local/man:\ 13839375Smsmith# :cputime=4h:\ 13939375Smsmith# :datasize=12M:\ 14039375Smsmith# :stacksize=4M:\ 14139375Smsmith# :filesize=8M:\ 14239375Smsmith# :memoryuse=16M:\ 14339375Smsmith# :openfiles=32:\ 14439375Smsmith# :maxproc=48:\ 14539375Smsmith# :tc=standard: 14625369Sache# 14725369Sache# 14839375Smsmith## 14939375Smsmith## Staff users - few restrictions and allow login anytime 15039375Smsmith## 15139375Smsmith#staff:\ 15239375Smsmith# :ignorenologin:\ 15339375Smsmith# :ignoretime:\ 15439375Smsmith# :requirehome@:\ 15539375Smsmith# :accounted@:\ 15639375Smsmith# :path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 15739375Smsmith# :umask=022:\ 15839375Smsmith# :tc=standard: 15939375Smsmith# 16039375Smsmith# 16139375Smsmith## 16239375Smsmith## root - fallback for root logins 16339375Smsmith## 16439375Smsmith#root:\ 16539375Smsmith# :path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 16639375Smsmith# :cputime=infinity:\ 16739375Smsmith# :datasize=infinity:\ 16839375Smsmith# :stacksize=infinity:\ 16939375Smsmith# :memorylocked=infinity:\ 17039375Smsmith# :memoryuse=infinity:\ 17139375Smsmith# :filesize=infinity:\ 17239375Smsmith# :coredumpsize=infinity:\ 17339375Smsmith# :openfiles=infinity:\ 17439375Smsmith# :maxproc=infinity:\ 17539375Smsmith# :memoryuse-cur=32M:\ 17639375Smsmith# :maxproc-cur=64:\ 17739375Smsmith# :openfiles-cur=1024:\ 17839375Smsmith# :priority=0:\ 17939375Smsmith# :requirehome@:\ 18039375Smsmith# :umask=022:\ 18139375Smsmith# :tc=auth-root-defaults: 18239375Smsmith# 18339375Smsmith# 18439375Smsmith## 18539375Smsmith## Settings used by /etc/rc 18639375Smsmith## 18739375Smsmith#daemon:\ 18839375Smsmith# :coredumpsize@:\ 18939375Smsmith# :coredumpsize-cur=0:\ 19039375Smsmith# :datasize=infinity:\ 19139375Smsmith# :datasize-cur@:\ 19239375Smsmith# :maxproc=512:\ 19339375Smsmith# :maxproc-cur@:\ 19439375Smsmith# :memoryuse-cur=64M:\ 19539375Smsmith# :memorylocked-cur=64M:\ 19639375Smsmith# :openfiles=1024:\ 19739375Smsmith# :openfiles-cur@:\ 19839375Smsmith# :stacksize=16M:\ 19939375Smsmith# :stacksize-cur@:\ 20039375Smsmith# :tc=default: 20139375Smsmith# 20239375Smsmith# 20339375Smsmith## 20439375Smsmith## Settings used by news subsystem 20539375Smsmith## 20639375Smsmith#news:\ 20739375Smsmith# :path=/usr/local/news/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 20839375Smsmith# :cputime=infinity:\ 20939375Smsmith# :filesize=128M:\ 21039375Smsmith# :datasize-cur=64M:\ 21139375Smsmith# :stacksize-cur=32M:\ 21239375Smsmith# :coredumpsize-cur=0:\ 21339375Smsmith# :maxmemorysize-cur=128M:\ 21439375Smsmith# :memorylocked=32M:\ 21539375Smsmith# :maxproc=128:\ 21639375Smsmith# :openfiles=256:\ 21739375Smsmith# :tc=default: 21839375Smsmith# 21939375Smsmith# 22039375Smsmith## 22139375Smsmith## The dialer class should be used for a dialup PPP/SLIP accounts 22239375Smsmith## Welcome messages/news suppressed 22339375Smsmith## 22439375Smsmith#dialer:\ 22539375Smsmith# :hushlogin:\ 22639375Smsmith# :requirehome@:\ 22739375Smsmith# :cputime=unlimited:\ 22839375Smsmith# :filesize=2M:\ 22939375Smsmith# :datasize=2M:\ 23039375Smsmith# :stacksize=4M:\ 23139375Smsmith# :coredumpsize=0:\ 23239375Smsmith# :memoryuse=4M:\ 23339375Smsmith# :memorylocked=1M:\ 23439375Smsmith# :maxproc=16:\ 23539375Smsmith# :openfiles=32:\ 23639375Smsmith# :tc=standard: 23739375Smsmith# 23839375Smsmith# 23939375Smsmith## 24039375Smsmith## Site full-time 24/7 PPP/SLIP connections 24139375Smsmith## - no time accounting, restricted to access via dialin lines 24239375Smsmith## 24339375Smsmith#site:\ 24439375Smsmith# :ignoretime:\ 24546209Shoek# :passwordtime@:\ 24639375Smsmith# :refreshtime@:\ 24739375Smsmith# :refreshperiod@:\ 24839375Smsmith# :sessionlimit@:\ 24939375Smsmith# :autodelete@:\ 25039375Smsmith# :expireperiod@:\ 25139375Smsmith# :graceexpire@:\ 25239375Smsmith# :gracetime@:\ 25339375Smsmith# :warnexpire@:\ 25439375Smsmith# :warnpassword@:\ 25539375Smsmith# :idletime@:\ 25639375Smsmith# :sessiontime@:\ 25739375Smsmith# :daytime@:\ 25839375Smsmith# :weektime@:\ 25939375Smsmith# :monthtime@:\ 26039375Smsmith# :warntime@:\ 26139375Smsmith# :accounted@:\ 26239375Smsmith# :tc=dialer:\ 26339375Smsmith# :tc=staff: 26439375Smsmith# 26539375Smsmith# 26639375Smsmith## 26739375Smsmith## Example standard accounting entries for subscriber levels 26839375Smsmith## 26939375Smsmith# 27039375Smsmith#subscriber|Subscribers:\ 27139375Smsmith# :accounted:\ 27239375Smsmith# :refreshtime=180d:\ 27339375Smsmith# :refreshperiod@:\ 27439375Smsmith# :sessionlimit@:\ 27539375Smsmith# :autodelete=30d:\ 27639375Smsmith# :expireperiod=180d:\ 27739375Smsmith# :graceexpire=7d:\ 27839375Smsmith# :gracetime=10m:\ 27939375Smsmith# :warnexpire=7d:\ 28039375Smsmith# :warnpassword=7d:\ 28139375Smsmith# :idletime=30m:\ 28239375Smsmith# :sessiontime=4h:\ 28339375Smsmith# :daytime=6h:\ 28439375Smsmith# :weektime=40h:\ 28539375Smsmith# :monthtime=120h:\ 28639375Smsmith# :warntime=4h:\ 28739375Smsmith# :tc=standard: 28839375Smsmith# 28939375Smsmith# 29039375Smsmith## 29139375Smsmith## Subscriber accounts. These accounts have their login times 29239375Smsmith## accounted and have access limits applied. 29339375Smsmith## 29439375Smsmith#subppp|PPP Subscriber Accounts:\ 29539375Smsmith# :tc=dialer:\ 29639375Smsmith# :tc=subscriber: 29739375Smsmith# 29839375Smsmith# 29939375Smsmith#subslip|SLIP Subscriber Accounts:\ 30039375Smsmith# :tc=dialer:\ 30139375Smsmith# :tc=subscriber: 30239375Smsmith# 30339375Smsmith# 30491527Srwatson#subshel|:Shell Subscriber Accounts:\ 30539375Smsmith# :tc=subscriber: 30639375Smsmith# 30769015Sobrien## 30869015Sobrien## If you want some of the accounts to use traditional UNIX DES based 30969015Sobrien## password hashes. 31069015Sobrien## 31169015Sobrien#des_users:\ 31283325Sru# :passwd_format=des:\ 31369015Sobrien# :tc=default: 314