|
|
# $OpenBSD: login.conf,v 1.2 2017/02/06 18:11:33 sthen Exp $
|
|
|
|
|
|
#
|
|
|
# Sample login.conf file. See login.conf(5) for details.
|
|
|
#
|
|
|
|
|
|
#
|
|
|
# Standard authentication styles:
|
|
|
#
|
|
|
# passwd Use only the local password file
|
|
|
# chpass Do not authenticate, but change users password (change
|
|
|
# the YP password if the user has one, else change the
|
|
|
# local password)
|
|
|
# lchpass Do not login; change user's local password instead
|
|
|
# radius Use radius authentication
|
|
|
# reject Use rejected authentication
|
|
|
# skey Use S/Key authentication
|
|
|
# activ ActivCard X9.9 token authentication
|
|
|
# crypto CRYPTOCard X9.9 token authentication
|
|
|
# snk Digital Pathways SecureNet Key authentication
|
|
|
# tis TIS Firewall Toolkit authentication
|
|
|
# token Generic X9.9 token authentication
|
|
|
# yubikey YubiKey authentication
|
|
|
#
|
|
|
|
|
|
# Default allowed authentication styles
|
|
|
auth-defaults:auth=passwd,skey:
|
|
|
|
|
|
# Default allowed authentication styles for authentication type ftp
|
|
|
auth-ftp-defaults:auth-ftp=passwd:
|
|
|
|
|
|
#
|
|
|
# The default values
|
|
|
# To alter the default authentication types change the line:
|
|
|
# :tc=auth-defaults:\
|
|
|
# to be read something like: (enables passwd, "myauth", and activ)
|
|
|
# :auth=passwd,myauth,activ:\
|
|
|
# Any value changed in the daemon class should be reset in default
|
|
|
# class.
|
|
|
#
|
|
|
default:\
|
|
|
:path=/usr/bin /bin /usr/sbin /sbin /usr/X11R6/bin /usr/local/bin /usr/local/sbin:\
|
|
|
:umask=022:\
|
|
|
:datasize-max=512M:\
|
|
|
:datasize-cur=512M:\
|
|
|
:maxproc-max=256:\
|
|
|
:maxproc-cur=128:\
|
|
|
:openfiles-max=1024:\
|
|
|
:openfiles-cur=512:\
|
|
|
:stacksize-cur=4M:\
|
|
|
:localcipher=blowfish,8:\
|
|
|
:tc=auth-defaults:\
|
|
|
:tc=auth-ftp-defaults:
|
|
|
|
|
|
#
|
|
|
# Settings used by /etc/rc and root
|
|
|
# This must be set properly for daemons started as root by inetd as well.
|
|
|
# Be sure reset these values back to system defaults in the default class!
|
|
|
#
|
|
|
daemon:\
|
|
|
:ignorenologin:\
|
|
|
:datasize=infinity:\
|
|
|
:maxproc=infinity:\
|
|
|
:openfiles-max=1024:\
|
|
|
:openfiles-cur=128:\
|
|
|
:stacksize-cur=8M:\
|
|
|
:localcipher=blowfish,9:\
|
|
|
:tc=default:
|
|
|
|
|
|
#
|
|
|
# Staff have fewer restrictions and can login even when nologins are set.
|
|
|
#
|
|
|
staff:\
|
|
|
:datasize-cur=512M:\
|
|
|
:datasize-max=infinity:\
|
|
|
:maxproc-max=512:\
|
|
|
:maxproc-cur=128:\
|
|
|
:ignorenologin:\
|
|
|
:requirehome@:\
|
|
|
:tc=default:
|
|
|
|
|
|
#
|
|
|
# Authpf accounts get a special motd and shell
|
|
|
#
|
|
|
authpf:\
|
|
|
:welcome=/etc/motd.authpf:\
|
|
|
:shell=/usr/sbin/authpf:\
|
|
|
:tc=default:
|
|
|
|
|
|
#
|
|
|
# Building ports with DPB uses raised limits
|
|
|
#
|
|
|
pbuild:\
|
|
|
:datasize-max=infinity:\
|
|
|
:datasize-cur=1024M:\
|
|
|
:maxproc-max=1024:\
|
|
|
:maxproc-cur=256:\
|
|
|
:tc=default:
|
|
|
|
|
|
#
|
|
|
# Override resource limits for certain daemons started by rc.d(8)
|
|
|
#
|
|
|
bgpd:\
|
|
|
:openfiles=512:\
|
|
|
:tc=daemon:
|
|
|
|
|
|
unbound:\
|
|
|
:openfiles=512:\
|
|
|
:tc=daemon:
|