login.conf revision 98853
12061Sjkh# login.conf - login class capabilities database. 234688Sbde# 32061Sjkh# Remember to rebuild the database after each change to this file: 433611Sjb# 532427Sjb# cap_mkdb /etc/login.conf 632427Sjb# 733611Sjb# This file controls resource limits, accounting limits and 833611Sjb# default user environment settings. 932427Sjb# 1032427Sjb# $FreeBSD: head/etc/login.conf 98853 2002-06-26 04:04:37Z dillon $ 112061Sjkh# 1215603Smarkm 1330169Sjkh# Default settings effectively disable resource limits, see the 1420710Sasami# examples below for a starting point to enable them. 1520710Sasami 163197Scsgr# defaults 172061Sjkh# These settings are used by login(1) by default for classless users 1812483Speter# Note that entries like "cputime" set both "cputime-cur" and "cputime-max" 1934509Sbde 202160Scsgrdefault:\ 212834Swollman :passwd_format=md5:\ 222061Sjkh :copyright=/etc/COPYRIGHT:\ 232061Sjkh :welcome=/etc/motd:\ 242160Scsgr :setenv=MAIL=/var/mail/$,BLOCKSIZE=K,FTP_PASSIVE_MODE=YES:\ 2517308Speter :path=/sbin /bin /usr/sbin /usr/bin /usr/games /usr/local/sbin /usr/local/bin /usr/X11R6/bin ~/bin:\ 2619320Sadam :nologin=/var/run/nologin:\ 2727788Sasami :cputime=unlimited:\ 2830169Sjkh :datasize=unlimited:\ 2925980Sasami :stacksize=unlimited:\ 301594Srgrimes :memorylocked=unlimited:\ 3117308Speter :memoryuse=unlimited:\ 3217308Speter :filesize=unlimited:\ 3327910Sasami :coredumpsize=unlimited:\ 3427910Sasami :openfiles=unlimited:\ 3527910Sasami :maxproc=unlimited:\ 3617308Speter :sbsize=unlimited:\ 3717308Speter :vmemoryuse=unlimited:\ 3817308Speter :priority=0:\ 3919175Sbde :ignoretime@:\ 4019175Sbde :umask=022: 4119175Sbde 4219175Sbde 4317308Speter# 4427910Sasami# A collection of common class names - forward them all to 'default' 4534509Sbde# (login would normally do this anyway, but having a class name 4627910Sasami# here suppresses the diagnostic) 4717308Speter# 482061Sjkhstandard:\ 492061Sjkh :tc=default: 501594Srgrimesxuser:\ 5130169Sjkh :tc=default: 5230169Sjkhstaff:\ 5330169Sjkh :tc=default: 5430169Sjkhdaemon:\ 5530169Sjkh :tc=default: 5630169Sjkhnews:\ 5730169Sjkh :tc=default: 5830169Sjkhdialer:\ 597407Srgrimes :tc=default: 607108Sphk 617108Sphk# 627108Sphk# Root can always login 637407Srgrimes# 647407Srgrimes# N.B. login_getpwclass(3) will use this entry for the root account, 657407Srgrimes# in preference to 'default'. 667108Sphkroot:\ 672061Sjkh :ignorenologin:\ 682061Sjkh :tc=default: 692061Sjkh 7017308Speter# 712061Sjkh# Russian Users Accounts. Setup proper environment variables. 722061Sjkh# 732061Sjkhrussian|Russian Users Accounts:\ 742061Sjkh :charset=KOI8-R:\ 752061Sjkh :lang=ru_RU.KOI8-R:\ 7630169Sjkh :tc=default: 7730169Sjkh 782626Scsgr 792061Sjkh###################################################################### 802061Sjkh###################################################################### 812061Sjkh## 822061Sjkh## Example entries 832061Sjkh## 842061Sjkh###################################################################### 8519320Sadam###################################################################### 862061Sjkh 872061Sjkh## Example defaults 882061Sjkh## These settings are used by login(1) by default for classless users 892061Sjkh## Note that entries like "cputime" set both "cputime-cur" and "cputime-max" 902061Sjkh# 912061Sjkh#default:\ 922061Sjkh# :cputime=infinity:\ 932061Sjkh# :datasize-cur=22M:\ 942061Sjkh# :stacksize-cur=8M:\ 952061Sjkh# :memorylocked-cur=10M:\ 962061Sjkh# :memoryuse-cur=30M:\ 972834Swollman# :filesize=infinity:\ 982834Swollman# :coredumpsize=infinity:\ 992834Swollman# :maxproc-cur=64:\ 1002834Swollman# :openfiles-cur=64:\ 1012834Swollman# :priority=0:\ 1022834Swollman# :requirehome@:\ 1031594Srgrimes# :umask=022:\ 1044486Sphk# :tc=auth-defaults: 1054486Sphk# 1064486Sphk# 1074486Sphk## 1084486Sphk## standard - standard user defaults 1092061Sjkh## 1102061Sjkh#standard:\ 11125979Sjkh# :copyright=/etc/COPYRIGHT:\ 11225979Sjkh# :welcome=/etc/motd:\ 11325979Sjkh# :setenv=MAIL=/var/mail/$,BLOCKSIZE=K:\ 11425979Sjkh# :path=~/bin /bin /usr/bin /usr/local/bin:\ 1152061Sjkh# :manpath=/usr/share/man /usr/local/man:\ 11625979Sjkh# :nologin=/var/run/nologin:\ 1172061Sjkh# :cputime=1h30m:\ 1182061Sjkh# :datasize=8M:\ 11917308Speter# :vmemoryuse=100M:\ 1202061Sjkh# :stacksize=2M:\ 1212061Sjkh# :memorylocked=4M:\ 1222061Sjkh# :memoryuse=8M:\ 1232061Sjkh# :filesize=8M:\ 1242061Sjkh# :coredumpsize=8M:\ 12512483Speter# :openfiles=24:\ 12612483Speter# :maxproc=32:\ 12712483Speter# :priority=0:\ 12812483Speter# :requirehome:\ 1292061Sjkh# :passwordtime=90d:\ 1302061Sjkh# :umask=002:\ 1318854Srgrimes# :ignoretime@:\ 1322061Sjkh# :tc=default: 1332061Sjkh# 13412483Speter# 1352061Sjkh## 13627910Sasami## users of X (needs more resources!) 13727910Sasami## 13818714Sache#xuser:\ 13917308Speter# :manpath=/usr/share/man /usr/X11R6/man /usr/local/man:\ 14034541Sbde# :cputime=4h:\ 14134575Sbde# :datasize=12M:\ 14234575Sbde# :vmemoryuse=infinity:\ 14334575Sbde# :stacksize=4M:\ 14434592Sbde# :filesize=8M:\ 14517308Speter# :memoryuse=16M:\ 14634575Sbde# :openfiles=32:\ 14734592Sbde# :maxproc=48:\ 14834575Sbde# :tc=standard: 14934592Sbde# 15034575Sbde# 15115603Smarkm## 15217308Speter## Staff users - few restrictions and allow login anytime 15317308Speter## 15417308Speter#staff:\ 15517308Speter# :ignorenologin:\ 15617308Speter# :ignoretime:\ 15717308Speter# :requirehome@:\ 15817308Speter# :accounted@:\ 15917308Speter# :path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 16017308Speter# :umask=022:\ 16118362Sjkh# :tc=standard: 16219966Sache# 16318362Sjkh# 16417308Speter## 16527910Sasami## root - fallback for root logins 16617308Speter## 16717308Speter#root:\ 16817308Speter# :path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 16928803Speter# :cputime=infinity:\ 17027910Sasami# :datasize=infinity:\ 17128803Speter# :stacksize=infinity:\ 17230113Sjkh# :memorylocked=infinity:\ 17327910Sasami# :memoryuse=infinity:\ 17417308Speter# :filesize=infinity:\ 1752061Sjkh# :coredumpsize=infinity:\ 17627910Sasami# :openfiles=infinity:\ 1772061Sjkh# :maxproc=infinity:\ 17828803Speter# :memoryuse-cur=32M:\ 17927910Sasami# :maxproc-cur=64:\ 1802061Sjkh# :openfiles-cur=1024:\ 18117308Speter# :priority=0:\ 18227910Sasami# :requirehome@:\ 18317308Speter# :umask=022:\ 18427910Sasami# :tc=auth-root-defaults: 18527910Sasami# 18627910Sasami# 18717308Speter## 18827910Sasami## Settings used by /etc/rc 18917308Speter## 19027910Sasami#daemon:\ 19127910Sasami# :coredumpsize@:\ 19227910Sasami# :coredumpsize-cur=0:\ 19327910Sasami# :datasize=infinity:\ 19427910Sasami# :datasize-cur@:\ 19527910Sasami# :maxproc=512:\ 19627910Sasami# :maxproc-cur@:\ 19727910Sasami# :memoryuse-cur=64M:\ 19827910Sasami# :memorylocked-cur=64M:\ 19927910Sasami# :openfiles=1024:\ 20027910Sasami# :openfiles-cur@:\ 20127910Sasami# :stacksize=16M:\ 20234509Sbde# :stacksize-cur@:\ 20327910Sasami# :tc=default: 20427910Sasami# 20527910Sasami# 20627910Sasami## 20727910Sasami## Settings used by news subsystem 20827910Sasami## 20927910Sasami#news:\ 21027910Sasami# :path=/usr/local/news/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ 21134688Sbde# :cputime=infinity:\ 21234688Sbde# :filesize=128M:\ 21327910Sasami# :datasize-cur=64M:\ 21427910Sasami# :stacksize-cur=32M:\ 21527910Sasami# :coredumpsize-cur=0:\ 21627910Sasami# :maxmemorysize-cur=128M:\ 21727910Sasami# :memorylocked=32M:\ 21827910Sasami# :maxproc=128:\ 21927910Sasami# :openfiles=256:\ 22027910Sasami# :tc=default: 22127910Sasami# 22227910Sasami# 22327910Sasami## 22427910Sasami## The dialer class should be used for a dialup PPP/SLIP accounts 22527910Sasami## Welcome messages/news suppressed 22627910Sasami## 22727910Sasami#dialer:\ 22817308Speter# :hushlogin:\ 22917308Speter# :requirehome@:\ 23027910Sasami# :cputime=unlimited:\ 23117308Speter# :filesize=2M:\ 23227910Sasami# :datasize=2M:\ 23327910Sasami# :stacksize=4M:\ 23427910Sasami# :coredumpsize=0:\ 23527910Sasami# :memoryuse=4M:\ 23633133Sadam# :memorylocked=1M:\ 23717466Speter# :maxproc=16:\ 23817308Speter# :openfiles=32:\ 23927910Sasami# :tc=standard: 24017308Speter# 24134688Sbde# 24234688Sbde## 24327910Sasami## Site full-time 24/7 PPP/SLIP connections 24434688Sbde## - no time accounting, restricted to access via dialin lines 24530113Sjkh## 24630277Sasami#site:\ 24734688Sbde# :ignoretime:\ 24834688Sbde# :passwordtime@:\ 24933133Sadam# :refreshtime@:\ 25017308Speter# :refreshperiod@:\ 25117308Speter# :sessionlimit@:\ 25227910Sasami# :autodelete@:\ 25317308Speter# :expireperiod@:\ 25427910Sasami# :graceexpire@:\ 25527910Sasami# :gracetime@:\ 25617308Speter# :warnexpire@:\ 25717308Speter# :warnpassword@:\ 25827910Sasami# :idletime@:\ 25917308Speter# :sessiontime@:\ 26030113Sjkh# :daytime@:\ 26127910Sasami# :weektime@:\ 26227910Sasami# :monthtime@:\ 26317308Speter# :warntime@:\ 26417308Speter# :accounted@:\ 26527910Sasami# :tc=dialer:\ 26617308Speter# :tc=staff: 26734509Sbde# 26827910Sasami# 26933133Sadam## 27017308Speter## Example standard accounting entries for subscriber levels 27117308Speter## 27227910Sasami# 27317308Speter#subscriber|Subscribers:\ 27427910Sasami# :accounted:\ 27517308Speter# :refreshtime=180d:\ 27617308Speter# :refreshperiod@:\ 27727910Sasami# :sessionlimit@:\ 27817308Speter# :autodelete=30d:\ 27927910Sasami# :expireperiod=180d:\ 28033133Sadam# :graceexpire=7d:\ 28117308Speter# :gracetime=10m:\ 28217308Speter# :warnexpire=7d:\ 28334509Sbde# :warnpassword=7d:\ 28417308Speter# :idletime=30m:\ 28529503Sbde# :sessiontime=4h:\ 28633133Sadam# :daytime=6h:\ 28717962Speter# :weektime=40h:\ 28817962Speter# :monthtime=120h:\ 28927910Sasami# :warntime=4h:\ 29017962Speter# :tc=standard: 29127910Sasami# 29233133Sadam# 29317962Speter## 29417962Speter## Subscriber accounts. These accounts have their login times 29534509Sbde## accounted and have access limits applied. 29617962Speter## 29727910Sasami#subppp|PPP Subscriber Accounts:\ 29833133Sadam# :tc=dialer:\ 29917962Speter# :tc=subscriber: 30017962Speter# 30127910Sasami# 30217962Speter#subslip|SLIP Subscriber Accounts:\ 30327910Sasami# :tc=dialer:\ 30433133Sadam# :tc=subscriber: 30517308Speter# 30617308Speter# 30727910Sasami#subshell|Shell Subscriber Accounts:\ 30817308Speter# :tc=subscriber: 30930205Sbde# 31017308Speter## 31117308Speter## If you want some of the accounts to use traditional UNIX DES based 31227910Sasami## password hashes. 31317962Speter## 31427910Sasami#des_users:\ 3152061Sjkh# :passwd_format=des:\ 31617308Speter# :tc=default: 31727910Sasami