]>
Commit | Line | Data |
---|---|---|
22a9b0b0 AM |
1 | # |
2 | # /etc/login.defs - Configuration control definitions for pwdutils package. | |
3 | # | |
4 | # Comment lines (lines beginning with "#") and blank lines are ignored. | |
5 | # Please read the manual page for more information (login.defs.5). | |
6 | # | |
7 | ||
8 | # | |
9 | # Should login be allowed if we can't cd to the home directory? | |
10 | # Default is yes. | |
11 | # | |
12 | DEFAULT_HOME yes | |
13 | ||
14 | # | |
15 | # The default PATH settings (used by login): | |
16 | # | |
17 | ENV_PATH /usr/local/bin:/usr/bin:/bin | |
18 | ||
19 | # | |
20 | # The default PATH settings for root (used by login): | |
21 | # | |
22 | ENV_ROOTPATH /sbin:/bin:/usr/sbin:/usr/bin | |
23 | ||
24 | # | |
25 | # Delay in seconds before being allowed another attempt | |
26 | # after a login failure | |
27 | # | |
28 | FAIL_DELAY 3 | |
29 | ||
30 | # | |
31 | # Enable logging and display of /var/log/faillog login | |
32 | # failure info. | |
33 | # | |
34 | FAILLOG_ENAB yes | |
35 | ||
36 | # | |
37 | # If defined and the file exist, login failures will be | |
38 | # logged here in a utmp format. | |
39 | # last, when invoked as lastb, will read /var/log/btmp, so... | |
40 | # | |
f2e6aa3c | 41 | FTMP_FILE /var/log/btmpx |
22a9b0b0 AM |
42 | |
43 | # | |
44 | # If defined, file which inhibits all the usual chatter | |
45 | # during the login sequence. If a full pathname, then hushed | |
46 | # mode will be enabled if the user's name or shell are found | |
47 | # in the file. If not a full pathname, then hushed mode will | |
48 | # be enabled if the file exists in the user's home directory. | |
49 | # | |
50 | #HUSHLOGIN_FILE .hushlogin | |
51 | HUSHLOGIN_FILE /etc/hushlogins | |
52 | ||
53 | # | |
54 | # Enable logging and display of /var/log/lastlog login time info. | |
55 | # | |
56 | LASTLOG_ENAB yes | |
57 | ||
58 | # | |
59 | # Enable display of unknown usernames when login failures | |
60 | # are recorded. | |
61 | # | |
62 | LOG_UNKFAIL_ENAB no | |
63 | ||
64 | # | |
65 | # Max number of login retries if password is bad | |
66 | # | |
67 | LOGIN_RETRIES 3 | |
68 | ||
69 | # | |
70 | # Max time in seconds for login | |
71 | # | |
72 | LOGIN_TIMEOUT 60 | |
73 | ||
74 | # | |
75 | # If defined, ":" delimited list of "message of the day" files to | |
76 | # be displayed upon login. | |
77 | # | |
78 | MOTD_FILE /etc/motd | |
79 | #MOTD_FILE /etc/motd:/usr/lib/news/news-motd | |
80 | ||
81 | # | |
82 | # If defined, file which maps tty line to TERM environment parameter. | |
83 | # Each line of the file is in a format something like "vt100 tty01". | |
84 | # | |
85 | TTYTYPE_FILE /etc/ttytype | |
86 | ||
87 | # | |
88 | # Terminal permissions | |
89 | # | |
90 | # TTYGROUP Login tty will be assigned this group ownership. | |
91 | # TTYPERM Login tty will be set to this permission. | |
92 | # | |
93 | # If you have a "write" program which is "setgid" to a special group | |
94 | # which owns the terminals, define TTYGROUP to the group number and | |
95 | # TTYPERM to 0620. Otherwise leave TTYGROUP commented out and assign | |
96 | # TTYPERM to either 622 or 600. | |
97 | # | |
98 | TTYGROUP tty | |
99 | TTYPERM 0620 | |
100 | ||
101 | # | |
102 | # Require password before chfn/chsh can make any changes. | |
103 | # | |
104 | CHFN_AUTH yes | |
105 | ||
106 | # | |
107 | # Which fields may be changed by regular users using chfn - use | |
108 | # any combination of letters "frwh" (full name, room number, work | |
109 | # phone, home phone). If not defined, no changes are allowed. | |
110 | # For backward compatibility, "yes" = "rwh" and "no" = "frwh". | |
111 | # | |
112 | CHFN_RESTRICT rwh | |
113 | ||
114 | # | |
115 | # Password aging controls (used by useradd): | |
116 | # | |
117 | # PASS_MAX_DAYS Maximum number of days a password may be used. | |
118 | # PASS_MIN_DAYS Minimum number of days allowed between password changes. | |
119 | # PASS_WARN_AGE Number of days warning given before a password expires. | |
120 | # | |
121 | PASS_MAX_DAYS 99999 | |
122 | PASS_MIN_DAYS 0 | |
123 | PASS_WARN_AGE 7 | |
124 | ||
125 | # | |
126 | # Min/max values for automatic uid selection in useradd | |
127 | # | |
128 | # SYSTEM_UID_MIN to SYSTEM_UID_MAX inclusive is the range for | |
129 | # UIDs for dynamically allocated administrative and system accounts. | |
130 | # UID_MIN to UID_MAX inclusive is the range of UIDs of dynamically | |
131 | # allocated user accounts. | |
132 | # | |
133 | SYSTEM_UID_MIN 100 | |
134 | SYSTEM_UID_MAX 499 | |
135 | UID_MIN 1000 | |
136 | UID_MAX 60000 | |
137 | ||
138 | # | |
139 | # Min/max values for automatic gid selection in groupadd | |
140 | # | |
141 | # SYSTEM_GID_MIN to SYSTEM_GID_MAX inclusive is the range for | |
142 | # GIDs for dynamically allocated administrative and system groups. | |
143 | # GID_MIN to GID_MAX inclusive is the range of GIDs of dynamically | |
144 | # allocated groups. | |
145 | # | |
146 | SYSTEM_GID_MIN 100 | |
147 | SYSTEM_GID_MAX 499 | |
148 | GID_MIN 1000 | |
149 | GID_MAX 60000 | |
150 | ||
80fbd286 ER |
151 | # |
152 | # User/group names must match the following regex expression. | |
4757dbc0 JB |
153 | # The default is [A-Za-z_][A-Za-z0-9_.-]*[A-Za-z0-9_.$-]\?, |
154 | # but be aware that the result could be depend on the locale settings. | |
155 | # | |
156 | #CHARACTER_CLASS [A-Za-z_][A-Za-z0-9_.-]*[A-Za-z0-9_.$-]\? | |
157 | CHARACTER_CLASS [ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz_][ABCDEFGHIJKLMNOPQRSTUVWXYabcdefghijklmnopqrstuvwxyz0123456789_.-]*[ABCDEFGHIJKLMNOPQRSTUVWXYabcdefghijklmnopqrstuvwxyz01234567899_.$-]\? | |
80fbd286 | 158 | |
22a9b0b0 AM |
159 | # |
160 | # Umask which is used by useradd and newusers for creating | |
161 | # new home directories. | |
162 | # | |
163 | UMASK 022 | |
164 | ||
80fbd286 ER |
165 | # |
166 | # If defined, this command is run when adding a group. | |
167 | # It should rebuild any NIS database etc. to add the | |
168 | # new created group. | |
169 | # | |
170 | GROUPADD_CMD /etc/pwdutils/groupadd.local | |
171 | ||
22a9b0b0 AM |
172 | # |
173 | # If defined, this command is run when adding a user. | |
174 | # It should rebuild any NIS database etc. to add the | |
175 | # new created account. | |
176 | # | |
177 | USERADD_CMD /etc/pwdutils/useradd.local | |
178 | ||
179 | # | |
180 | # If defined, this command is run before removing a user. | |
181 | # It should remove any at/cron/print jobs etc. owned by | |
182 | # the user to be removed. | |
183 | # | |
184 | USERDEL_PRECMD /etc/pwdutils/userdel-pre.local | |
185 | ||
186 | # | |
187 | # If defined, this command is run after removing a user. | |
188 | # It should rebuild any NIS database etc. to remove the | |
189 | # account from it. | |
190 | # | |
191 | USERDEL_POSTCMD /etc/pwdutils/userdel-post.local |