login.conf revision 34346
1# Sample login.conf - login class capabilities database. 2# To speed up access to this data, you can use /usr/bin/cap_mkdb 3# to create a database form of this file: 4# 5# cap_mkdb /etc/login.conf 6# 7# Don't forget to do this after each edit as well! 8# 9# This file controls resource limits, accounting limits and 10# default user environment settings. 11# 12# $Id: login.conf,v 1.19 1997/12/03 01:12:48 ache Exp $ 13# 14 15 16# Authentication methods 17 18auth-defaults:\ 19 :auth=krb_skey_or_passwd,passwd,kerberos,skey: 20 21auth-root-defaults:\ 22 :auth-login=krb_skey_or_passwd,passwd,kerberos,skey:\ 23 :auth-rlogin=krb_or_skey,kerberos,skey: 24 25auth-ftp-defaults:\ 26 :auth=skey_or_pwd,passwd,skey: 27 28 29# Example defaults 30# These settings are used by login(1) by default for classless users 31# Note that entries like "cputime" set both "cputime-cur" and "cputime-max" 32 33default:\ 34 :cputime=infinity:\ 35 :datasize-cur=22M:\ 36 :stacksize-cur=8M:\ 37 :memorylocked-cur=10M:\ 38 :memoryuse-cur=30M:\ 39 :filesize=infinity:\ 40 :coredumpsize=infinity:\ 41 :maxproc-cur=64:\ 42 :openfiles-cur=64:\ 43 :priority=0:\ 44 :requirehome@:\ 45 :umask=022:\ 46 :tc=auth-defaults: 47 48 49# 50# standard - standard user defaults 51# 52standard:\ 53 :copyright=/etc/COPYRIGHT:\ 54 :welcome=/etc/motd:\ 55 :setenv=MAIL=/var/mail/$,BLOCKSIZE=K,EDITOR=/usr/bin/ee:\ 56 :path=~/bin /bin /usr/bin /usr/local/bin:\ 57 :manpath=/usr/share/man /usr/local/man:\ 58 :nologin=/etc/nologin:\ 59 :cputime=1h30m:\ 60 :datasize=8M:\ 61 :stacksize=2M:\ 62 :memorylocked=4M:\ 63 :memoryuse=8M:\ 64 :filesize=8M:\ 65 :coredumpsize=8M:\ 66 :openfiles=24:\ 67 :maxproc=32:\ 68 :priority=0:\ 69 :requirehome:\ 70 :passwordperiod=90d:\ 71 :umask=002:\ 72 :ignoretime@:\ 73 :tc=default: 74 75 76# 77# users of X (needs more resources!) 78# 79xuser:\ 80 :manpath=/usr/share/man /usr/X11R6/man /usr/local/man:\ 81 :cputime=4h:\ 82 :datasize=12M:\ 83 :stacksize=4M:\ 84 :filesize=8M:\ 85 :memoryuse=16M:\ 86 :openfiles=32:\ 87 :maxproc=48:\ 88 :tc=standard: 89 90 91# 92# Staff users - few restrictions and allow login anytime 93# 94staff:\ 95 :ignorenologin:\ 96 :ignoretime:\ 97 :requirehome@:\ 98 :accounted@:\ 99 :path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 100 :umask=022:\ 101 :tc=standard: 102 103 104# 105# root - fallback for root logins 106# 107root:\ 108 :path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 109 :cputime=infinity:\ 110 :datasize=infinity:\ 111 :stacksize=infinity:\ 112 :memorylocked=infinity:\ 113 :memoryuse=infinity:\ 114 :filesize=infinity:\ 115 :coredumpsize=infinity:\ 116 :openfiles=infinity:\ 117 :maxproc=infinity:\ 118 :memoryuse-cur=32M:\ 119 :maxproc-cur=64:\ 120 :openfiles-cur=1024:\ 121 :priority=0:\ 122 :requirehome@:\ 123 :umask=022:\ 124 :tc=auth-root-defaults: 125 126 127# 128# Settings used by /etc/rc 129# 130daemon:\ 131 :coredumpsize@:\ 132 :coredumpsize-cur=0:\ 133 :datasize=infinity:\ 134 :datasize-cur@:\ 135 :maxproc=512:\ 136 :maxproc-cur@:\ 137 :memoryuse-cur=64M:\ 138 :memorylocked-cur=64M:\ 139 :openfiles=1024:\ 140 :openfiles-cur@:\ 141 :stacksize=16M:\ 142 :stacksize-cur@:\ 143 :tc=default: 144 145 146# 147# Settings used by news subsystem 148# 149news:\ 150 :path=/usr/local/news/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 151 :cputime=infinity:\ 152 :filesize=128M:\ 153 :datasize-cur=64M:\ 154 :stacksize-cur=32M:\ 155 :coredumpsize-cur=0:\ 156 :maxmemorysize-cur=128M:\ 157 :memorylocked=32M:\ 158 :maxproc=128:\ 159 :openfiles=256:\ 160 :tc=default: 161 162 163# 164# The dialer class should be used for a dialup PPP/SLIP accounts 165# Welcome messages/news suppressed 166# 167dialer:\ 168 :hushlogin:\ 169 :requirehome@:\ 170 :cputime=unlimited:\ 171 :filesize=2M:\ 172 :datasize=2M:\ 173 :stacksize=4M:\ 174 :coredumpsize=0:\ 175 :memoryuse=4M:\ 176 :memorylocked=1M:\ 177 :maxproc=16:\ 178 :openfiles=32:\ 179 :tc=standard: 180 181 182# 183# Site full-time 24/7 PPP/SLIP connections 184# - no time accounting, restricted to access via dialin lines 185# 186site:\ 187 :ignoretime:\ 188 :passwordperiod@:\ 189 :refreshtime@:\ 190 :refreshperiod@:\ 191 :sessionlimit@:\ 192 :autodelete@:\ 193 :expireperiod@:\ 194 :graceexpire@:\ 195 :gracetime@:\ 196 :warnexpire@:\ 197 :warnpassword@:\ 198 :idletime@:\ 199 :sessiontime@:\ 200 :daytime@:\ 201 :weektime@:\ 202 :monthtime@:\ 203 :warntime@:\ 204 :accounted@:\ 205 :tc=dialer:\ 206 :tc=staff: 207 208 209# 210# Example standard accounting entries for subscriber levels 211# 212 213subscriber|Subscribers:\ 214 :accounted:\ 215 :refreshtime=180d:\ 216 :refreshperiod@:\ 217 :sessionlimit@:\ 218 :autodelete=30d:\ 219 :expireperiod=180d:\ 220 :graceexpire=7d:\ 221 :gracetime=10m:\ 222 :warnexpire=7d:\ 223 :warnpassword=7d:\ 224 :idletime=30m:\ 225 :sessiontime=4h:\ 226 :daytime=6h:\ 227 :weektime=40h:\ 228 :monthtime=120h:\ 229 :warntime=4h:\ 230 :tc=standard: 231 232 233# 234# Subscriber accounts. These accounts have their login times 235# accounted and have access limits applied. 236# 237subppp|PPP Subscriber Accounts:\ 238 :tc=dialer:\ 239 :tc=subscriber: 240 241 242subslip|SLIP Subscriber Accounts:\ 243 :tc=dialer:\ 244 :tc=subscriber: 245 246 247subshell:Shell Subscriber Accounts:\ 248 :tc=subscriber: 249 250 251# 252# Russian Users Accounts. Setup proper environment variables. 253# 254russian:Russian Users Accounts:\ 255 :charset=KOI8-R:\ 256 :lang=ru_RU.KOI8-R:\ 257 :tc=default: 258