login.conf revision 42587
125184Sjkh# Sample login.conf - login class capabilities database. 2113674Smtm# To speed up access to this data, you can use /usr/bin/cap_mkdb 3113674Smtm# to create a database form of this file: 4113674Smtm# 5113674Smtm# cap_mkdb /etc/login.conf 6113674Smtm# 7113674Smtm# Don't forget to do this after each edit as well! 8113674Smtm# 9113674Smtm# This file controls resource limits, accounting limits and 10113674Smtm# default user environment settings. 11113674Smtm# 12113674Smtm# $Id: login.conf,v 1.25 1999/01/11 09:07:38 asami Exp $ 13113674Smtm# 14113674Smtm 15113674Smtm# Default settings effectively disable resource limits, see the 16113674Smtm# examples below for a starting point to enable them. 17113674Smtm 18113674Smtm# defaults 19113674Smtm# These settings are used by login(1) by default for classless users 20113674Smtm# Note that entries like "cputime" set both "cputime-cur" and "cputime-max" 21113674Smtm 22113674Smtmdefault:\ 23113674Smtm :copyright=/etc/COPYRIGHT:\ 24113674Smtm :welcome=/etc/motd:\ 2550472Speter :setenv=MAIL=/var/mail/$,BLOCKSIZE=K,EDITOR=/usr/bin/ee:\ 2666830Sobrien :path=~/bin /bin /usr/bin /usr/local/bin:\ 2725184Sjkh :nologin=/var/run/nologin:\ 28113674Smtm :cputime=unlimited:\ 29113674Smtm :datasize=unlimited:\ 30113674Smtm :stacksize=unlimited:\ 31113674Smtm :memorylocked=unlimited:\ 3225184Sjkh :memoryuse=unlimited:\ 33113674Smtm :filesize=unlimited:\ 34113674Smtm :coredumpsize=unlimited:\ 35113674Smtm :openfiles=unlimited:\ 36113674Smtm :maxproc=unlimited:\ 37147088Sbrooks :priority=0:\ 38147088Sbrooks :ignoretime@:\ 39113674Smtm :umask=022: 40113674Smtm 41113674Smtm 42147088Sbrooks# 43147088Sbrooks# A collection of common class names - forward them all to 'default' 44147088Sbrooks# (login would normally do this anyway, but having a class name 45113674Smtm# here suppresses the diagnostic) 46149726Sbrooks# 47149483Sbrooksstandard:\ 48147088Sbrooks :tc=default: 49113674Smtmxuser:\ 50147088Sbrooks :tc=default: 51147088Sbrooksstaff:\ 52149726Sbrooks :tc=default: 53149726Sbrooksdaemon:\ 54149726Sbrooks :tc=default: 55147682Sbrooksnews:\ 56147088Sbrooks :tc=default: 57147088Sbrooksdialer:\ 58147088Sbrooks :tc=default: 59147088Sbrooks 60149726Sbrooks# 61149726Sbrooks# Root can always login 62149726Sbrooks# 63147088Sbrooksroot:\ 64147088Sbrooks :ignorenologin:\ 65147088Sbrooks :tc=default: 66147088Sbrooks 67147121Sbrooks# 68113674Smtm# Russian Users Accounts. Setup proper environment variables. 6925184Sjkh# 70116029Smtmrussian:Russian Users Accounts:\ 71116029Smtm :charset=KOI8-R:\ 72116029Smtm :lang=ru_RU.KOI8-R:\ 73116100Smtm :tc=default: 74116029Smtm 75116029Smtm 76116029Smtm###################################################################### 77116029Smtm###################################################################### 78116029Smtm## 79147121Sbrooks## Example entries 80116029Smtm## 81116029Smtm###################################################################### 82116029Smtm###################################################################### 83116029Smtm 84116029Smtm## Authentication methods 85116029Smtm## Note that these are disabled by default, and libutil must 86116029Smtm## be rebuilt with LOGIN_CAP_AUTH defined to use them. 87116029Smtm# 88116029Smtm#auth-defaults:\ 89116029Smtm# :auth=krb_skey_or_passwd,passwd,kerberos,skey: 90116029Smtm# 91116032Smtm#auth-root-defaults:\ 92116032Smtm# :auth-login=krb_skey_or_passwd,passwd,kerberos,skey:\ 93116032Smtm# :auth-rlogin=krb_or_skey,kerberos,skey: 94147121Sbrooks# 95116029Smtm#auth-ftp-defaults:\ 96116029Smtm# :auth=skey_or_pwd,passwd,skey: 97116029Smtm# 98147088Sbrooks# 99147682Sbrooks## Example defaults 100147121Sbrooks## These settings are used by login(1) by default for classless users 101147088Sbrooks## Note that entries like "cputime" set both "cputime-cur" and "cputime-max" 102147088Sbrooks# 103147088Sbrooks#default:\ 104147088Sbrooks# :cputime=infinity:\ 105147088Sbrooks# :datasize-cur=22M:\ 106147088Sbrooks# :stacksize-cur=8M:\ 107147088Sbrooks# :memorylocked-cur=10M:\ 108147121Sbrooks# :memoryuse-cur=30M:\ 109116029Smtm# :filesize=infinity:\ 110116029Smtm# :coredumpsize=infinity:\ 111147088Sbrooks# :maxproc-cur=64:\ 112147088Sbrooks# :openfiles-cur=64:\ 113147088Sbrooks# :priority=0:\ 114147088Sbrooks# :requirehome@:\ 115147088Sbrooks# :umask=022:\ 116147088Sbrooks# :tc=auth-defaults: 117147088Sbrooks# 118147088Sbrooks# 119147088Sbrooks## 120147088Sbrooks## standard - standard user defaults 121147088Sbrooks## 122149726Sbrooks#standard:\ 123147088Sbrooks# :copyright=/etc/COPYRIGHT:\ 124147684Sbrooks# :welcome=/etc/motd:\ 125147088Sbrooks# :setenv=MAIL=/var/mail/$,BLOCKSIZE=K,EDITOR=/usr/bin/ee:\ 126147088Sbrooks# :path=~/bin /bin /usr/bin /usr/local/bin:\ 127147088Sbrooks# :manpath=/usr/share/man /usr/local/man:\ 128147088Sbrooks# :nologin=/var/run/nologin:\ 129147088Sbrooks# :cputime=1h30m:\ 130147088Sbrooks# :datasize=8M:\ 131147088Sbrooks# :stacksize=2M:\ 132147088Sbrooks# :memorylocked=4M:\ 133147088Sbrooks# :memoryuse=8M:\ 134147088Sbrooks# :filesize=8M:\ 135147088Sbrooks# :coredumpsize=8M:\ 136147088Sbrooks# :openfiles=24:\ 137147088Sbrooks# :maxproc=32:\ 138147088Sbrooks# :priority=0:\ 139147088Sbrooks# :requirehome:\ 140147088Sbrooks# :passwordperiod=90d:\ 141147088Sbrooks# :umask=002:\ 142149401Sbrooks# :ignoretime@:\ 143149401Sbrooks# :tc=default: 144147088Sbrooks# 145147088Sbrooks# 146147088Sbrooks## 147147088Sbrooks## users of X (needs more resources!) 148147088Sbrooks## 149147088Sbrooks#xuser:\ 150147088Sbrooks# :manpath=/usr/share/man /usr/X11R6/man /usr/local/man:\ 151147088Sbrooks# :cputime=4h:\ 152147088Sbrooks# :datasize=12M:\ 153147088Sbrooks# :stacksize=4M:\ 154147088Sbrooks# :filesize=8M:\ 155149401Sbrooks# :memoryuse=16M:\ 156149401Sbrooks# :openfiles=32:\ 157149401Sbrooks# :maxproc=48:\ 158149401Sbrooks# :tc=standard: 159149401Sbrooks# 160149401Sbrooks# 161149401Sbrooks## 162149401Sbrooks## Staff users - few restrictions and allow login anytime 163149401Sbrooks## 164149401Sbrooks#staff:\ 165149401Sbrooks# :ignorenologin:\ 166149401Sbrooks# :ignoretime:\ 167149401Sbrooks# :requirehome@:\ 168149401Sbrooks# :accounted@:\ 169149401Sbrooks# :path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 170149401Sbrooks# :umask=022:\ 171147088Sbrooks# :tc=standard: 172147088Sbrooks# 173147088Sbrooks# 174147088Sbrooks## 175147088Sbrooks## root - fallback for root logins 176147088Sbrooks## 177147088Sbrooks#root:\ 178147088Sbrooks# :path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 179147088Sbrooks# :cputime=infinity:\ 180147088Sbrooks# :datasize=infinity:\ 181147088Sbrooks# :stacksize=infinity:\ 182147088Sbrooks# :memorylocked=infinity:\ 183147088Sbrooks# :memoryuse=infinity:\ 184147088Sbrooks# :filesize=infinity:\ 185147088Sbrooks# :coredumpsize=infinity:\ 186147088Sbrooks# :openfiles=infinity:\ 187147088Sbrooks# :maxproc=infinity:\ 188147088Sbrooks# :memoryuse-cur=32M:\ 189147088Sbrooks# :maxproc-cur=64:\ 190147088Sbrooks# :openfiles-cur=1024:\ 191147088Sbrooks# :priority=0:\ 192147088Sbrooks# :requirehome@:\ 193147088Sbrooks# :umask=022:\ 194147088Sbrooks# :tc=auth-root-defaults: 195147088Sbrooks# 196147088Sbrooks# 197147088Sbrooks## 198147088Sbrooks## Settings used by /etc/rc 199147088Sbrooks## 200147088Sbrooks#daemon:\ 201152441Sbrooks# :coredumpsize@:\ 202152441Sbrooks# :coredumpsize-cur=0:\ 203152441Sbrooks# :datasize=infinity:\ 204152441Sbrooks# :datasize-cur@:\ 205152441Sbrooks# :maxproc=512:\ 206152441Sbrooks# :maxproc-cur@:\ 207152441Sbrooks# :memoryuse-cur=64M:\ 208152441Sbrooks# :memorylocked-cur=64M:\ 209152441Sbrooks# :openfiles=1024:\ 210152441Sbrooks# :openfiles-cur@:\ 211152441Sbrooks# :stacksize=16M:\ 212152441Sbrooks# :stacksize-cur@:\ 213152441Sbrooks# :tc=default: 214152441Sbrooks# 215152441Sbrooks# 216152441Sbrooks## 217152441Sbrooks## Settings used by news subsystem 218152441Sbrooks## 219152441Sbrooks#news:\ 220152441Sbrooks# :path=/usr/local/news/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 221152441Sbrooks# :cputime=infinity:\ 222152441Sbrooks# :filesize=128M:\ 223152441Sbrooks# :datasize-cur=64M:\ 224152441Sbrooks# :stacksize-cur=32M:\ 225152441Sbrooks# :coredumpsize-cur=0:\ 226152441Sbrooks# :maxmemorysize-cur=128M:\ 227152441Sbrooks# :memorylocked=32M:\ 228152441Sbrooks# :maxproc=128:\ 229152441Sbrooks# :openfiles=256:\ 230152441Sbrooks# :tc=default: 231152441Sbrooks# 232152441Sbrooks# 233152441Sbrooks## 234152441Sbrooks## The dialer class should be used for a dialup PPP/SLIP accounts 235152441Sbrooks## Welcome messages/news suppressed 236152441Sbrooks## 237152441Sbrooks#dialer:\ 238152441Sbrooks# :hushlogin:\ 239152441Sbrooks# :requirehome@:\ 240152441Sbrooks# :cputime=unlimited:\ 241152441Sbrooks# :filesize=2M:\ 242152441Sbrooks# :datasize=2M:\ 243152441Sbrooks# :stacksize=4M:\ 244152441Sbrooks# :coredumpsize=0:\ 245152441Sbrooks# :memoryuse=4M:\ 246152441Sbrooks# :memorylocked=1M:\ 247152441Sbrooks# :maxproc=16:\ 248152441Sbrooks# :openfiles=32:\ 249152441Sbrooks# :tc=standard: 250152441Sbrooks# 251152441Sbrooks# 252152441Sbrooks## 253152441Sbrooks## Site full-time 24/7 PPP/SLIP connections 254152441Sbrooks## - no time accounting, restricted to access via dialin lines 255152441Sbrooks## 256152441Sbrooks#site:\ 257152441Sbrooks# :ignoretime:\ 258152441Sbrooks# :passwordperiod@:\ 259113674Smtm# :refreshtime@:\ 260113674Smtm# :refreshperiod@:\ 261113674Smtm# :sessionlimit@:\ 262113674Smtm# :autodelete@:\ 263113674Smtm# :expireperiod@:\ 264113674Smtm# :graceexpire@:\ 265113674Smtm# :gracetime@:\ 266113674Smtm# :warnexpire@:\ 267113674Smtm# :warnpassword@:\ 268113674Smtm# :idletime@:\ 269113674Smtm# :sessiontime@:\ 270113674Smtm# :daytime@:\ 271113674Smtm# :weektime@:\ 272113674Smtm# :monthtime@:\ 273113674Smtm# :warntime@:\ 274113674Smtm# :accounted@:\ 275113674Smtm# :tc=dialer:\ 276113674Smtm# :tc=staff: 277113674Smtm# 278113674Smtm# 279113674Smtm## 280100280Sgordon## Example standard accounting entries for subscriber levels 281116029Smtm## 282116029Smtm# 283116029Smtm#subscriber|Subscribers:\ 284116029Smtm# :accounted:\ 285116029Smtm# :refreshtime=180d:\ 286116029Smtm# :refreshperiod@:\ 287116029Smtm# :sessionlimit@:\ 288116029Smtm# :autodelete=30d:\ 289116029Smtm# :expireperiod=180d:\ 290116029Smtm# :graceexpire=7d:\ 291116029Smtm# :gracetime=10m:\ 292116029Smtm# :warnexpire=7d:\ 293116029Smtm# :warnpassword=7d:\ 294116029Smtm# :idletime=30m:\ 295116029Smtm# :sessiontime=4h:\ 296116029Smtm# :daytime=6h:\ 297116029Smtm# :weektime=40h:\ 298116029Smtm# :monthtime=120h:\ 299116029Smtm# :warntime=4h:\ 300116029Smtm# :tc=standard: 301116029Smtm# 302116029Smtm# 303113674Smtm## 304113674Smtm## Subscriber accounts. These accounts have their login times 305113674Smtm## accounted and have access limits applied. 306113674Smtm## 307113674Smtm#subppp|PPP Subscriber Accounts:\ 308113674Smtm# :tc=dialer:\ 309100280Sgordon# :tc=subscriber: 310113674Smtm# 311113674Smtm# 312113674Smtm#subslip|SLIP Subscriber Accounts:\ 313113674Smtm# :tc=dialer:\ 314113674Smtm# :tc=subscriber: 315100280Sgordon# 316100280Sgordon# 317116029Smtm#subshell:Shell Subscriber Accounts:\ 318116029Smtm# :tc=subscriber: 319116029Smtm# 320116029Smtm# 321116029Smtm## 322116029Smtm## Russian Users Accounts. Setup proper environment variables. 323116029Smtm## 324116029Smtm#russian:Russian Users Accounts:\ 325116029Smtm# :charset=KOI8-R:\ 326116029Smtm# :lang=ru_RU.KOI8-R:\ 327116029Smtm# :tc=default: 328116029Smtm