xref: /titanic_41/usr/src/cmd/login/login.dfl (revision 49d3bc91e27cd871b950d56c01398fa2f2e12ab4) 
1#
2# Copyright 2008 Sun Microsystems, Inc.  All rights reserved.
3# Use is subject to license terms.
4#
5# CDDL HEADER START
6#
7# The contents of this file are subject to the terms of the
8# Common Development and Distribution License (the "License").
9# You may not use this file except in compliance with the License.
10#
11# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
12# or http://www.opensolaris.org/os/licensing.
13# See the License for the specific language governing permissions
14# and limitations under the License.
15#
16# When distributing Covered Code, include this CDDL HEADER in each
17# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
18# If applicable, add the following below this CDDL HEADER, with the
19# fields enclosed by brackets "[]" replaced with your own identifying
20# information: Portions Copyright [yyyy] [name of copyright owner]
21#
22# CDDL HEADER END
23#
24
25# Set the TZ environment variable of the shell.
26#
27#TIMEZONE=EST5EDT
28
29# ULIMIT sets the file size limit for the login.  Units are disk blocks.
30# The default of zero means no limit.
31#
32#ULIMIT=0
33
34# If CONSOLE is set, root can only login on that device.
35# If the specified device is /dev/console, then root can also log into
36# any of the currently enabled /dev/vt/# virtual terminal devices.
37# Comment this line out to allow remote login by root.
38#
39CONSOLE=/dev/console
40
41# PASSREQ determines if login requires a password.
42#
43PASSREQ=YES
44
45# ALTSHELL determines if the SHELL environment variable should be set
46#
47ALTSHELL=YES
48
49# PATH sets the initial shell PATH variable
50#
51#PATH=/usr/bin:
52
53# SUPATH sets the initial shell PATH variable for root
54#
55#SUPATH=/usr/sbin:/usr/bin
56
57# TIMEOUT sets the number of seconds (between 0 and 900) to wait before
58# abandoning a login session.
59#
60#TIMEOUT=300
61
62# UMASK sets the initial shell file creation mode mask.  See umask(1).
63#
64#UMASK=022
65
66# SYSLOG determines whether the syslog(3) LOG_AUTH facility should be used
67# to log all root logins at level LOG_NOTICE and multiple failed login
68# attempts at LOG_CRIT.
69#
70SYSLOG=YES
71
72# SLEEPTIME controls the number of seconds that the command should
73# wait before printing the "login incorrect" message when a
74# bad password is provided.  The range is limited from
75# 0 to 5 seconds.
76#
77#SLEEPTIME=4
78
79# DISABLETIME  If present, and greater than zero, the number of seconds
80# login will wait after RETRIES failed attempts or the PAM framework returns
81# PAM_ABORT. Default is 20. Minimum is 0. No maximum is imposed.
82#
83#DISABLETIME=20
84
85# RETRIES determines the number of failed logins that will be
86# allowed before login exits. Default is 5 and maximum is 15.
87# If account locking is configured (user_attr(4)/policy.conf(4))
88# for a local user's account (passwd(4)/shadow(4)), that account
89# will be locked if failed logins equals or exceeds RETRIES.
90#
91#RETRIES=5
92#
93# The SYSLOG_FAILED_LOGINS variable is used to determine how many failed
94# login attempts will be allowed by the system before a failed login
95# message is logged, using the syslog(3) LOG_NOTICE facility.  For example,
96# if the variable is set to 0, login will log -all- failed login attempts.
97#
98#SYSLOG_FAILED_LOGINS=5
99