Source code pulled from OpenBSD for OpenNTPD. The place to contribute to this code is via the OpenBSD CVS tree.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

109 lines
2.5 KiB

  1. # $OpenBSD: login.conf,v 1.2 2017/02/06 18:11:33 sthen Exp $
  2. #
  3. # Sample login.conf file. See login.conf(5) for details.
  4. #
  5. #
  6. # Standard authentication styles:
  7. #
  8. # passwd Use only the local password file
  9. # chpass Do not authenticate, but change users password (change
  10. # the YP password if the user has one, else change the
  11. # local password)
  12. # lchpass Do not login; change user's local password instead
  13. # radius Use radius authentication
  14. # reject Use rejected authentication
  15. # skey Use S/Key authentication
  16. # activ ActivCard X9.9 token authentication
  17. # crypto CRYPTOCard X9.9 token authentication
  18. # snk Digital Pathways SecureNet Key authentication
  19. # tis TIS Firewall Toolkit authentication
  20. # token Generic X9.9 token authentication
  21. # yubikey YubiKey authentication
  22. #
  23. # Default allowed authentication styles
  24. auth-defaults:auth=passwd,skey:
  25. # Default allowed authentication styles for authentication type ftp
  26. auth-ftp-defaults:auth-ftp=passwd:
  27. #
  28. # The default values
  29. # To alter the default authentication types change the line:
  30. # :tc=auth-defaults:\
  31. # to be read something like: (enables passwd, "myauth", and activ)
  32. # :auth=passwd,myauth,activ:\
  33. # Any value changed in the daemon class should be reset in default
  34. # class.
  35. #
  36. default:\
  37. :path=/usr/bin /bin /usr/sbin /sbin /usr/X11R6/bin /usr/local/bin /usr/local/sbin:\
  38. :umask=022:\
  39. :datasize-max=512M:\
  40. :datasize-cur=512M:\
  41. :maxproc-max=256:\
  42. :maxproc-cur=128:\
  43. :openfiles-max=1024:\
  44. :openfiles-cur=512:\
  45. :stacksize-cur=4M:\
  46. :localcipher=blowfish,8:\
  47. :tc=auth-defaults:\
  48. :tc=auth-ftp-defaults:
  49. #
  50. # Settings used by /etc/rc and root
  51. # This must be set properly for daemons started as root by inetd as well.
  52. # Be sure reset these values back to system defaults in the default class!
  53. #
  54. daemon:\
  55. :ignorenologin:\
  56. :datasize=infinity:\
  57. :maxproc=infinity:\
  58. :openfiles-max=1024:\
  59. :openfiles-cur=128:\
  60. :stacksize-cur=8M:\
  61. :localcipher=blowfish,9:\
  62. :tc=default:
  63. #
  64. # Staff have fewer restrictions and can login even when nologins are set.
  65. #
  66. staff:\
  67. :datasize-cur=512M:\
  68. :datasize-max=infinity:\
  69. :maxproc-max=512:\
  70. :maxproc-cur=128:\
  71. :ignorenologin:\
  72. :requirehome@:\
  73. :tc=default:
  74. #
  75. # Authpf accounts get a special motd and shell
  76. #
  77. authpf:\
  78. :welcome=/etc/motd.authpf:\
  79. :shell=/usr/sbin/authpf:\
  80. :tc=default:
  81. #
  82. # Building ports with DPB uses raised limits
  83. #
  84. pbuild:\
  85. :datasize-max=infinity:\
  86. :datasize-cur=1024M:\
  87. :maxproc-max=1024:\
  88. :maxproc-cur=256:\
  89. :tc=default:
  90. #
  91. # Override resource limits for certain daemons started by rc.d(8)
  92. #
  93. bgpd:\
  94. :openfiles=512:\
  95. :tc=daemon:
  96. unbound:\
  97. :openfiles=512:\
  98. :tc=daemon: