shadow-utils/login.defs

   1 #
   2 # Please note that the parameters in this configuration file control the
   3 # behavior of the tools from the shadow-utils component. None of these
   4 # tools uses the PAM mechanism, and the utilities that use PAM (such as the
   5 # passwd command) should therefore be configured elsewhere. Refer to
   6 # /etc/pam.d/system-auth for more information.
   7 #
   8
   9 # *REQUIRED*
  10 #   Directory where mailboxes reside, _or_ name of file, relative to the
  11 #   home directory.  If you _do_ define both, MAIL_DIR takes precedence.
  12 #   QMAIL_DIR is for Qmail
  13 #
  14 #QMAIL_DIR      Maildir
  15 MAIL_DIR        /var/spool/mail
  16 #MAIL_FILE      .mail
  17
  18 # Password aging controls:
  19 #
  20 #       PASS_MAX_DAYS   Maximum number of days a password may be used.
  21 #       PASS_MIN_DAYS   Minimum number of days allowed between password changes.
  22 #       PASS_MIN_LEN    Minimum acceptable password length.
  23 #       PASS_WARN_AGE   Number of days warning given before a password expires.
  24 #
  25 PASS_MAX_DAYS   99999
  26 PASS_MIN_DAYS   0
  27 PASS_MIN_LEN    5
  28 PASS_WARN_AGE   7
  29
  30 #
  31 # Min/max values for automatic uid selection in useradd
  32 #
  33 UID_MIN                  1000
  34 UID_MAX                 60000
  35 # System accounts
  36 SYS_UID_MIN               201
  37 SYS_UID_MAX               999
  38
  39 #
  40 # Min/max values for automatic gid selection in groupadd
  41 #
  42 GID_MIN                  1000
  43 GID_MAX                 60000
  44 # System accounts
  45 SYS_GID_MIN               201
  46 SYS_GID_MAX               999
  47
  48 #
  49 # If defined, this command is run when removing a user.
  50 # It should remove any at/cron/print jobs etc. owned by
  51 # the user to be removed (passed as the first argument).
  52 #
  53 #USERDEL_CMD    /usr/sbin/userdel_local
  54
  55 #
  56 # If useradd should create home directories for users by default
  57 # On RH systems, we do. This option is overridden with the -m flag on
  58 # useradd command line.
  59 #
  60 CREATE_HOME     yes
  61
  62 # The permission mask is initialized to this value. If not specified,
  63 # the permission mask will be initialized to 022.
  64 UMASK           077
  65
  66 # This enables userdel to remove user groups if no members exist.
  67 #
  68 USERGROUPS_ENAB yes
  69
  70 # Use SHA512 to encrypt password.
  71 ENCRYPT_METHOD SHA512
  72