login.conf revision 26061
1# Sample login.conf - login class capabilities database. 2# To speed up access to this data, you can use /usr/bin/cap_mkdb 3# to create a database form of this file: 4# 5# cap_mkdb /etc/login.conf 6# 7# Don't forget to do this after each edit as well! 8# 9# This file controls resource limits, accounting limits and 10# default user environment settings. 11# 12# $Id: login.conf,v 1.11 1997/05/23 00:12:34 pst Exp $ 13# 14 15 16# Authentication methods 17 18auth-defaults:\ 19 :auth=krb_skey_or_passwd,passwd,kerberos,skey: 20 21auth-root-defaults:\ 22 :auth-login=krb_skey_or_passwd,passwd,kerberos,skey:\ 23 :auth-rlogin=krb_or_skey,kerberos,skey:\ 24 25auth-ftp-defaults:\ 26 :auth=skey_or_pwd,passwd,skey: 27 28 29# Example defaults 30# These settings are used by login(1) by default for classless users 31# Note that entries like "cputime" set both "cputime-cur" and "cputime-max" 32 33default:\ 34 :cputime=infinity:\ 35 :datasize-cur=16M:\ 36 :stacksize-cur=8M:\ 37 :memorylocked-cur=10M:\ 38 :memoryuse-cur=30M:\ 39 :filesize=infinity:\ 40 :coredumpsize=infinity:\ 41 :maxproc-cur=64:\ 42 :openfiles-cur=64:\ 43 :priority=0:\ 44 :requirehome@:\ 45 :umask=022:\ 46 :tc=auth-defaults: 47 48 49# 50# standard - standard user defaults 51# 52standard:\ 53 :copyright=/etc/COPYRIGHT:\ 54 :welcome=/etc/motd:\ 55 :setenv=MAIL=/var/mail/$,BLOCKSIZE=K,EDITOR=/usr/bin/ee:\ 56 :path=~/bin /bin /usr/bin /usr/local/bin:\ 57 :manpath=/usr/share/man /usr/local/man:\ 58 :nologin=/etc/nologin:\ 59 :cputime=1h30m:\ 60 :datasize=8M:\ 61 :stacksize=2M:\ 62 :memorylocked=4M:\ 63 :memoryuse=8M:\ 64 :filesize=8M:\ 65 :coredumpsize=8M:\ 66 :openfiles=24:\ 67 :maxproc=32:\ 68 :priority=0:\ 69 :requirehome:\ 70 :passwordperiod=90d:\ 71 :umask=002:\ 72 :ignoretime@:\ 73 :tc=default: 74 75 76# 77# users of X (needs more resources!) 78# 79xuser:\ 80 :manpath=/usr/share/man /usr/X11R6/man /usr/local/man:\ 81 :cputime=4h:\ 82 :datasize=12M:\ 83 :stacksize=4M:\ 84 :filesize=8M:\ 85 :memoryuse=16M:\ 86 :openfiles=32:\ 87 :maxproc=48:\ 88 :tc=standard: 89 90 91# 92# Staff users - few restrictions and allow login anytime 93# 94staff:\ 95 :ignorenologin:\ 96 :ignoretime:\ 97 :requirehome@:\ 98 :accounted@:\ 99 :path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 100 :umask=022:\ 101 :tc=standard: 102 103 104# 105# root - fallback for root logins 106# 107root:\ 108 :path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 109 :cputime=infinity:\ 110 :datasize=infinity:\ 111 :stacksize=infinity:\ 112 :memorylocked=infinity:\ 113 :memoryuse=infinity:\ 114 :filesize=infinity:\ 115 :coredumpsize=infinity:\ 116 :openfiles=infinity:\ 117 :maxproc=infinity:\ 118 :memoryuse-cur=32M:\ 119 :maxproc-cur=64:\ 120 :openfiles-cur=1024:\ 121 :priority=0:\ 122 :requirehome@:\ 123 :umask=022:\ 124 :tc=auth-root-defaults:\ 125 126 127# 128# Settings used by /etc/rc 129# 130daemon:\ 131 :coredumpsize=0:\ 132 :datasize=32M:\ 133 :maxproc=256:\ 134 :maxproc-cur@:\ 135 :memoryuse-cur=64M:\ 136 :memorylocked-cur=64M:\ 137 :openfiles=1024:\ 138 :openfiles-cur@:\ 139 :stacksize=16M:\ 140 :tc=default: 141 142 143# 144# Settings used by news subsystem 145# 146news:\ 147 :path=/usr/local/news/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 148 :cputime=infinity:\ 149 :filesize=128M:\ 150 :datasize-curr=64M:\ 151 :stacksize-cur=32M:\ 152 :coredumpsize-cur=0:\ 153 :maxmemorysize-cur=128M:\ 154 :memorylocked=32M:\ 155 :maxproc=128:\ 156 :openfiles=256:\ 157 :tc=default: 158 159 160# 161# The dialer class should be used for a dialup PPP/SLIP accounts 162# Welcome messages/news suppressed 163# 164dialer:\ 165 :hushlogin:\ 166 :requirehome@:\ 167 :cputime=unlimited:\ 168 :filesize=2M:\ 169 :datasize=2M:\ 170 :stacksize=4M:\ 171 :coredumpsize=0:\ 172 :memoryuse=4M:\ 173 :memorylocked=1M:\ 174 :maxproc=16:\ 175 :openfiles=32:\ 176 :tc=standard: 177 178 179# 180# Site full-time 24/7 PPP/SLIP connections 181# - no time accounting, restricted to access via dialin lines 182# 183site:\ 184 :ignoretime:\ 185 :passwordperiod@:\ 186 :refreshtime@:\ 187 :refreshperiod@:\ 188 :sessionlimit@:\ 189 :autodelete@:\ 190 :expireperiod@:\ 191 :graceexpire@:\ 192 ;gracetime@:\ 193 :warnexpire@:\ 194 :warnpassword@:\ 195 :idletime@:\ 196 :sessiontime@:\ 197 :daytime@:\ 198 :weektime@:\ 199 :monthtime@:\ 200 :warntime@:\ 201 :accounted@:\ 202 :tc=dialer:\ 203 :tc=staff: 204 205 206# 207# Example standard accounting entries for subscriber levels 208# 209 210subscriber|Subscribers:\ 211 :accounted:\ 212 :refreshtime=180d:\ 213 :refreshperiod@:\ 214 :sessionlimit@:\ 215 :autodelete=30d:\ 216 :expireperiod=180d:\ 217 :graceexpire=7d:\ 218 :gracetime=10m:\ 219 :warnexpire=7d:\ 220 :warnpassword=7d:\ 221 :idletime=30m:\ 222 :sessiontime=4h:\ 223 :daytime=6h:\ 224 :weektime=40h:\ 225 :monthtime=120h:\ 226 :warntime=4h:\ 227 :tc=standard: 228 229 230# 231# Subscriber accounts. These accounts have their login times 232# accounted and have access limits applied. 233# 234subppp|PPP Subscriber Accounts:\ 235 :tc=dialer:\ 236 :tc=subscriber: 237 238 239subslip|SLIP Subscriber Accounts:\ 240 :tc=dialer:\ 241 :tc=subscriber: 242 243 244subshell:Shell Subscriber Accounts:\ 245 :tc=subscriber: 246 247 248# 249# Russian Users Accounts. Setup proper environment variables. 250# 251russian:Russian Users Accounts:\ 252 :charset=KOI8-R:\ 253 :lang=ru_RU.KOI8-R:\ 254 :tc=default: 255