[packages/pwdutils.git] / pwdutils.login.defs

#
# /etc/login.defs - Configuration control definitions for pwdutils package.
#
# Comment lines (lines beginning with "#") and blank lines are ignored.
# Please read the manual page for more information (login.defs.5).
#

#
# Should login be allowed if we can't cd to the home directory?
# Default is yes.
#
DEFAULT_HOME		yes

#
# The default PATH settings (used by login):
#
ENV_PATH                /usr/local/bin:/usr/bin:/bin

#
# The default PATH settings for root (used by login):
#
ENV_ROOTPATH            /sbin:/bin:/usr/sbin:/usr/bin

#
# Delay in seconds before being allowed another attempt
# after a login failure
#
FAIL_DELAY		3

#
# Enable logging and display of /var/log/faillog login
# failure info.
#
FAILLOG_ENAB		yes

#
# If defined and the file exist, login failures will be
# logged here in a utmp format.
# last, when invoked as lastb, will read /var/log/btmp, so...
#
#FTMP_FILE	/var/log/btmp

#
# If defined, file which inhibits all the usual chatter
# during the login sequence. If a full pathname, then hushed
# mode will be enabled if the user's name or shell are found
# in the file.  If not a full pathname, then hushed mode will
# be enabled if the file exists in the user's home directory.
#
#HUSHLOGIN_FILE	.hushlogin
HUSHLOGIN_FILE	/etc/hushlogins

#
# Enable logging and display of /var/log/lastlog login time info.
#
LASTLOG_ENAB		yes

#
# Enable display of unknown usernames when login failures
# are recorded.
#
LOG_UNKFAIL_ENAB	no

#
# Max number of login retries if password is bad
#
LOGIN_RETRIES		3

#
# Max time in seconds for login
#
LOGIN_TIMEOUT		60

#
# If defined, ":" delimited list of "message of the day" files to
# be displayed upon login.
#
MOTD_FILE	/etc/motd
#MOTD_FILE	/etc/motd:/usr/lib/news/news-motd

#
# If defined, file which maps tty line to TERM environment parameter.
# Each line of the file is in a format something like "vt100  tty01".
#
TTYTYPE_FILE	/etc/ttytype

#
# Terminal permissions
#
#	TTYGROUP	Login tty will be assigned this group ownership.
#	TTYPERM		Login tty will be set to this permission.
#
# If you have a "write" program which is "setgid" to a special group
# which owns the terminals, define TTYGROUP to the group number and
# TTYPERM to 0620.  Otherwise leave TTYGROUP commented out and assign
# TTYPERM to either 622 or 600.
#
TTYGROUP	tty
TTYPERM		0620

#
# Require password before chfn/chsh can make any changes.
#
CHFN_AUTH		yes

#
# Which fields may be changed by regular users using chfn - use
# any combination of letters "frwh" (full name, room number, work
# phone, home phone).  If not defined, no changes are allowed.
# For backward compatibility, "yes" = "rwh" and "no" = "frwh".
#
CHFN_RESTRICT		rwh

#
# Password aging controls (used by useradd):
#
#	PASS_MAX_DAYS	Maximum number of days a password may be used.
#	PASS_MIN_DAYS	Minimum number of days allowed between password changes.
#	PASS_WARN_AGE	Number of days warning given before a password expires.
#
PASS_MAX_DAYS	99999
PASS_MIN_DAYS	0
PASS_WARN_AGE	7

#
# Min/max values for automatic uid selection in useradd
#
# SYSTEM_UID_MIN to SYSTEM_UID_MAX inclusive is the range for
# UIDs for dynamically allocated administrative and system accounts.
# UID_MIN to UID_MAX inclusive is the range of UIDs of dynamically
# allocated user accounts.
#
SYSTEM_UID_MIN		  100
SYSTEM_UID_MAX		  499
UID_MIN			 1000
UID_MAX			60000

#
# Min/max values for automatic gid selection in groupadd
#
# SYSTEM_GID_MIN to SYSTEM_GID_MAX inclusive is the range for
# GIDs for dynamically allocated administrative and system groups.
# GID_MIN to GID_MAX inclusive is the range of GIDs of dynamically
# allocated groups.
#
SYSTEM_GID_MIN		  100
SYSTEM_GID_MAX		  499
GID_MIN			 1000
GID_MAX			60000

#
# Umask which is used by useradd and newusers for creating
# new home directories.
#
UMASK			022

#
# If defined, this command is run when adding a user.
# It should rebuild any NIS database etc. to add the
# new created account.
#
USERADD_CMD		/etc/pwdutils/useradd.local

#
# If defined, this command is run before removing a user.
# It should remove any at/cron/print jobs etc. owned by
# the user to be removed.
#
USERDEL_PRECMD		/etc/pwdutils/userdel-pre.local

#
# If defined, this command is run after removing a user.
# It should rebuild any NIS database etc. to remove the
# account from it.
#
USERDEL_POSTCMD		/etc/pwdutils/userdel-post.local
Commit	Line	Data
22a9b0b0 AM	1	#
	2	# /etc/login.defs - Configuration control definitions for pwdutils package.
	3	#
	4	# Comment lines (lines beginning with "#") and blank lines are ignored.
	5	# Please read the manual page for more information (login.defs.5).
	6	#
	7
	8	#
	9	# Should login be allowed if we can't cd to the home directory?
	10	# Default is yes.
	11	#
	12	DEFAULT_HOME yes
	13
	14	#
	15	# The default PATH settings (used by login):
	16	#
	17	ENV_PATH /usr/local/bin:/usr/bin:/bin
	18
	19	#
	20	# The default PATH settings for root (used by login):
	21	#
	22	ENV_ROOTPATH /sbin:/bin:/usr/sbin:/usr/bin
	23
	24	#
	25	# Delay in seconds before being allowed another attempt
	26	# after a login failure
	27	#
	28	FAIL_DELAY 3
	29
	30	#
	31	# Enable logging and display of /var/log/faillog login
	32	# failure info.
	33	#
	34	FAILLOG_ENAB yes
	35
	36	#
	37	# If defined and the file exist, login failures will be
	38	# logged here in a utmp format.
	39	# last, when invoked as lastb, will read /var/log/btmp, so...
	40	#
	41	#FTMP_FILE /var/log/btmp
	42
	43	#
	44	# If defined, file which inhibits all the usual chatter
	45	# during the login sequence. If a full pathname, then hushed
	46	# mode will be enabled if the user's name or shell are found
	47	# in the file. If not a full pathname, then hushed mode will
	48	# be enabled if the file exists in the user's home directory.
	49	#
	50	#HUSHLOGIN_FILE .hushlogin
	51	HUSHLOGIN_FILE /etc/hushlogins
	52
	53	#
	54	# Enable logging and display of /var/log/lastlog login time info.
	55	#
	56	LASTLOG_ENAB yes
	57
	58	#
	59	# Enable display of unknown usernames when login failures
	60	# are recorded.
	61	#
	62	LOG_UNKFAIL_ENAB no
	63
	64	#
65	# Max number of login retries if password is bad
66	#
67	LOGIN_RETRIES 3
68
69	#
70	# Max time in seconds for login
71	#
72	LOGIN_TIMEOUT 60
73
74	#
75	# If defined, ":" delimited list of "message of the day" files to
76	# be displayed upon login.
77	#
78	MOTD_FILE /etc/motd
79	#MOTD_FILE /etc/motd:/usr/lib/news/news-motd
80
81	#
82	# If defined, file which maps tty line to TERM environment parameter.
83	# Each line of the file is in a format something like "vt100 tty01".
84	#
85	TTYTYPE_FILE /etc/ttytype
86
87	#
88	# Terminal permissions
89	#
90	# TTYGROUP Login tty will be assigned this group ownership.
91	# TTYPERM Login tty will be set to this permission.
92	#
93	# If you have a "write" program which is "setgid" to a special group
94	# which owns the terminals, define TTYGROUP to the group number and
95	# TTYPERM to 0620. Otherwise leave TTYGROUP commented out and assign
96	# TTYPERM to either 622 or 600.
97	#
98	TTYGROUP tty
99	TTYPERM 0620
100
101	#
102	# Require password before chfn/chsh can make any changes.
103	#
104	CHFN_AUTH yes
105
106	#
107	# Which fields may be changed by regular users using chfn - use
108	# any combination of letters "frwh" (full name, room number, work
109	# phone, home phone). If not defined, no changes are allowed.
110	# For backward compatibility, "yes" = "rwh" and "no" = "frwh".
111	#
112	CHFN_RESTRICT rwh
113
114	#
115	# Password aging controls (used by useradd):
116	#
117	# PASS_MAX_DAYS Maximum number of days a password may be used.
118	# PASS_MIN_DAYS Minimum number of days allowed between password changes.
119	# PASS_WARN_AGE Number of days warning given before a password expires.
120	#
121	PASS_MAX_DAYS 99999
122	PASS_MIN_DAYS 0
123	PASS_WARN_AGE 7
124
125	#
126	# Min/max values for automatic uid selection in useradd
127	#
128	# SYSTEM_UID_MIN to SYSTEM_UID_MAX inclusive is the range for
129	# UIDs for dynamically allocated administrative and system accounts.
130	# UID_MIN to UID_MAX inclusive is the range of UIDs of dynamically
131	# allocated user accounts.
132	#
133	SYSTEM_UID_MIN 100
134	SYSTEM_UID_MAX 499
135	UID_MIN 1000
136	UID_MAX 60000
137
138	#
139	# Min/max values for automatic gid selection in groupadd
140	#
141	# SYSTEM_GID_MIN to SYSTEM_GID_MAX inclusive is the range for
142	# GIDs for dynamically allocated administrative and system groups.
143	# GID_MIN to GID_MAX inclusive is the range of GIDs of dynamically
144	# allocated groups.
145	#
146	SYSTEM_GID_MIN 100
147	SYSTEM_GID_MAX 499
148	GID_MIN 1000
149	GID_MAX 60000
150
151	#
152	# Umask which is used by useradd and newusers for creating
153	# new home directories.
154	#
155	UMASK 022
156
157	#
158	# If defined, this command is run when adding a user.
159	# It should rebuild any NIS database etc. to add the
160	# new created account.
161	#
162	USERADD_CMD /etc/pwdutils/useradd.local
163
164	#
165	# If defined, this command is run before removing a user.
166	# It should remove any at/cron/print jobs etc. owned by
167	# the user to be removed.
168	#
169	USERDEL_PRECMD /etc/pwdutils/userdel-pre.local
170
171	#
172	# If defined, this command is run after removing a user.
173	# It should rebuild any NIS database etc. to remove the
174	# account from it.
175	#
176	USERDEL_POSTCMD /etc/pwdutils/userdel-post.local