LOGIN.DEFS

åç§°

æè¿°

The /etc/login.defs file defines the site−specific configuration for the shadow password suite. This file is required. Absence of this file will not prevent system operation, but will probably result in undesirable operation.

This file is a readable text file, each line of the file describing one configuration parameter. The lines consist of a configuration name and value, separated by whitespace. Blank lines and comment lines are ignored. Comments are introduced with a “#” pound sign and the pound sign must be the first non−white character of the line.

Parameter values may be of four types: strings, booleans, numbers, and long numbers. A string is comprised of any printable characters. A boolean should be either the value yes or no. An undefined boolean parameter or one with a value other than these will be given a no value. Numbers (both regular and long) may be either decimal values, octal values (precede the value with 0) or hexadecimal values (precede the value with 0x). The maximum value of the regular and long numeric parameters is machine−dependent.

æä¾å¦ä¸éç½®é¡¹ï¼

CHFN_AUTH (boolean)

CHFN_RESTRICT (string)

This parameter specifies which values in the gecos field of the /etc/passwd file may be changed by regular users using the chfn program. It can be any combination of letters f, r, w, h, for Full name, Room number, Work phone, and Home phone, respectively. For backward compatibility, yes is equivalent to rwh and no is equivalent to frwh. If not specified, only the superuser can make any changes. The most restrictive setting is better achieved by not installing chfn SUID.

CHSH_AUTH (boolean)

CONSOLE (string)

å¦ææ²¡æå®ä¹ï¼å¯ä»¥å¨ä»»ä½è®¾å¤ä¸ä½¿ç¨ rootã

æå®çè®¾å¤æ¶ä¸å¸¦ /dev/ åç¼ã

CONSOLE_GROUPS (string)

CREATE_HOME (boolean)

æç¤ºæ¯å¦åºè¯¥ä¸ºæ°ç¨æ·é»è®¤åå»ºä¸»ç®å½ã

DEFAULT_HOME (boolean)

ENCRYPT_METHOD (string)

å¯ä»¥ä½¿ç¨å¦ä¸å¼ï¼DES (default), MD5, SHA256, SHA512.

æ³¨æï¼æ¤åæ°ä¼è¦ç MD5_CRYPT_ENAB åéã

ENV_HZ (string)

ENV_PATH (string)

If set, it will be used to define the PATH environment variable when a regular user login. The value is a colon separated list of paths (for example /bin:/usr/bin) and can be preceded by PATH=. The default value is PATH=/bin:/usr/bin.

ENV_SUPATH (string)

If set, it will be used to define the PATH environment variable when the superuser login. The value is a colon separated list of paths (for example /sbin:/bin:/usr/sbin:/usr/bin) and can be preceded by PATH=. The default value is PATH=/sbin:/bin:/usr/sbin:/usr/bin.

ENV_TZ (string)

ENVIRON_FILE (string)

ä»¥ # å¼å¤´çè¡å°è§ä¸ºæ³¨éï¼å¹¶è¢«å¿½ç¥ã

ERASECHAR (number)

ç»ç«¯æ¦é¤åç¬¦ (010 = backspace, 0177 = DEL)ã

FAIL_DELAY (number)

ç»å½å¤±è´¥åï¼çå¾å¤å°ç§æååè®¸ç»å½ã

FAILLOG_ENAB (boolean)

åè®¸ç»å½å¹¶æ¾ç¤º /var/log/faillog ç»å½å¤±è´¥ä¿¡æ¯ã

FAKE_SHELL (string)

å¦æè®¾ç½®äºï¼login å°æ§è¡æ¤ shell èä¸æ¯å¨ /etc/passwd ä¸æå®çç¨æ· shellã

FTMP_FILE (string)

GID_MAX (number), GID_MIN (number)

useraddï¼groupadd æ newusers åå»ºçå¸¸è§ç»çç» ID çèå´ã

GID_MIN å GID_MAX çé»è®¤å¼åå«æ¯ 1000 å 60000ã

HUSHLOGIN_FILE (string)

If defined, this file can inhibit all the usual chatter during the login sequence. If a full pathname is specified, then hushed mode will be enabled if the user’s name or shell are found in the file. If not a full pathname, then hushed mode will be enabled if the file exists in the user’s home directory.

ISSUE_FILE (string)

å¦æå®ä¹äºï¼æ¤æä»¶å°å¨æ¯æ¬¡çç»å½æç¤ºä¹åç°å®ã

KILLCHAR (number)

ç»ç«¯ KILL åç¬¦ (025 = CTRL/U)ã

LASTLOG_ENAB (boolean)

åè®¸è®°å½åæ¾ç¤º /var/log/lastlog ç»å½æ¶é´ä¿¡æ¯ã

LOG_OK_LOGINS (boolean)

åè®¸è®°å½æåç»å½ã

LOG_UNKFAIL_ENAB (boolean)

å¨è®°å½å°ç»å½å¤±è´¥æ¶ï¼åè®¸è®°å½æªç¥ç¨æ·åã

LOGIN_RETRIES (number)

å¯ç éè¯¯æ¶ï¼éè¯çæå¤§æ¬¡æ°ã

LOGIN_STRING (string)

å¦æåç¬¦ä¸²åå« %sï¼å°ä¼è¢«ç¨æ·åæ¿æ¢ã

LOGIN_TIMEOUT (number)

æå¤§ç»å½æ¶é´(ä»¥ç§ä¸ºåä½)ã

MAIL_CHECK_ENAB (boolean)

å¯ç¨ç»å½æ¶æ£æ¥åç°å®é®ç®±ç¶æã

MAIL_DIR (string)

MAIL_FILE (string)

å®ä¹ç¨æ·é®ç®±æä»¶çä½ç½®(ç¸å¯¹äºä¸»ç®å½)ã

MAIL_DIR and MAIL_FILE åéç± useraddï¼usermod å userdel ç¨äºåå»ºãç§»å¨æå é¤ç¨æ·é®ç®±ã

å¦æ MAIL_CHECK_ENAB è®¾ç½®ä¸º yesï¼å®ä»¬ä¹è¢«ç¨äºå®ä¹ MAIL ç¯å¢åéã

MAX_MEMBERS_PER_GROUP (number)

é»è®¤å¼æ¯ 0ï¼æå³çç»ä¸çæåæ°æ²¡æéå¶ã

å¦æè¦å¼ºå¶è¿ä¸ªéå¶ï¼å¯ä»¥ä½¿ç¨ 25ã

MD5_CRYPT_ENAB (boolean)

This variable is superseded by the ENCRYPT_METHOD variable or by any command line option used to configure the encryption algorithm.

æ¤åéå·²ç»åºå¼ãæ¨åºè¯¥ä½¿ç¨ ENCRYPT_METHODã

MOTD_FILE (string)

If defined, “:” delimited list of “message of the day” files to be displayed upon login.

NOLOGINS_FILE (string)

If defined, name of file whose presence will inhibit non−root logins. The contents of this file should be a message indicating why logins are inhibited.

OBSCURE_CHECKS_ENAB (boolean)

å¯¹å¯ç æ´æ¹å¯ç¨éå æ£æ¥ã

PASS_ALWAYS_WARN (boolean)

å¦ææ¯ rootï¼è¦åå¼±å¯ç ï¼ä½æ¯ä»ç¶åè®¸ä½¿ç¨ã

PASS_CHANGE_TRIES (number)

å¯ä»¥å°è¯æ´æ¹å¯ç çæå¤§æ¬¡æ°(å¤ªå®¹æ)ã

PASS_MAX_DAYS (number)

PASS_MIN_DAYS (number)

PASS_WARN_AGE (number)

PASS_MAX_DAYS, PASS_MIN_DAYS and PASS_WARN_AGE are only used at the time of account creation. Any changes to these settings won’t affect existing accounts.

PASS_MAX_LEN (number), PASS_MIN_LEN (number)

crypt() çææåç¬¦ä½æ°ãPASS_MAX_LEN é»è®¤æ¯ 8ï¼é¤éæ¨èªå·±ç crypt() æ´å¥½ï¼å¦åä¸è¦æ´æ¹ãå¦æ MD5_CRYPT_ENAB è®¾ä¸º yesï¼ä¼è¢«å¿½ç¥ã

PORTTIME_CHECKS_ENAB (boolean)

Enable checking of time restrictions specified in /etc/porttime.

QUOTAS_ENAB (boolean)

Enable setting of resource limits from /etc/limits and ulimit, umask, and niceness from the user’s passwd gecos field.

SHA_CRYPT_MIN_ROUNDS (number), SHA_CRYPT_MAX_ROUNDS (number)

ENCRYPT_METHOD è®¾ä¸º SHA256 æ SHA512 æ¶ï¼æ- ¤é¡¹ç¡®å®å å¯ç®æ³é»è®¤ä½¿ç¨ SHA è½®è½¬æ°ç®(å½è½®è½¬æ°æ²¡æéè¿å½ä»¤è¡æå®æ¶)ã

å¦ææ²¡ææå®ï¼libc ä¼éæ©é»è®¤çè½®è½¬æ°(5000)ã

å¼å¿é¡»å¨ 1000 − 999,999,999 ä¹é´ã

å¦æåªè®¾ç½®äºä¸ä¸ª SHA_CRYPT_MIN_ROUNDS æ SHA_CRYPT_MAX_ROUNDS å¼ï¼å°±ä¼ä½¿ç¨è¿ä¸ªå¼ã

å¦æ SHA_CRYPT_MIN_ROUNDS > SHA_CRYPT_MAX_ROUNDSï¼å°ä¼ä½¿ç¨å¤§çé£ä¸ªã

SULOG_FILE (string)

å¦æå®ä¹äºï¼ææç su æ´»å¨é½ä¼è®°å½å°æ¤æä»¶ã

SU_NAME (string)

SU_WHEEL_ONLY (boolean)

å¦æä¸º yesï¼ç¨æ·å¿é¡»å¨ /etc/group ä¸å«è®¾å®ä¸º GID ä¸º 0 çç»(å¨å¤§é¨å Linux ä¸å« root)çæåã

SUB_GID_MIN (number), SUB_GID_MAX (number), SUB_GID_COUNT (number)

If /etc/subuid exists, the commands useradd and newusers (unless the user already have subordinate group IDs) allocate SUB_GID_COUNT unused group IDs from the range SUB_GID_MIN to SUB_GID_MAX for each new user.

The default values for SUB_GID_MIN, SUB_GID_MAX, SUB_GID_COUNT are respectively 100000, 600100000 and 10000.

SUB_UID_MIN (number), SUB_UID_MAX (number), SUB_UID_COUNT (number)

If /etc/subuid exists, the commands useradd and newusers (unless the user already have subordinate user IDs) allocate SUB_UID_COUNT unused user IDs from the range SUB_UID_MIN to SUB_UID_MAX for each new user.

The default values for SUB_UID_MIN, SUB_UID_MAX, SUB_UID_COUNT are respectively 100000, 600100000 and 10000.

SYS_GID_MAX (number), SYS_GID_MIN (number)

useraddãgroupadd æ newusers åå»ºçç³»ç»ç»çç» ID çèå´ã

SYS_GID_MIN å SYS_GID_MAX çé»è®¤å¼åå«æ¯ 101 å GID_MIN−1ã

SYS_UID_MAX (number), SYS_UID_MIN (number)

useradd æ newusers åå»ºçç³»ç»ç¨æ·çç¨æ· ID çèå´ã

SYS_UID_MIN å SYS_UID_MAX çé»è®¤å¼åå«æ¯ 101 å UID_MIN−1ã

SYSLOG_SG_ENAB (boolean)

åè®¸“syslog”è®°å½ sg çæ´»å¨ã

SYSLOG_SU_ENAB (boolean)

TTYGROUP (string), TTYPERM (string)

The terminal permissions: the login tty will be owned by the TTYGROUP group, and the permissions will be set to TTYPERM.

By default, the ownership of the terminal is set to the user’s primary group and the permissions are set to 0600.

TTYGROUP can be either the name of a group or a numeric group identifier.

If you have a write program which is “setgid” to a special group which owns the terminals, define TTYGROUP to the group number and TTYPERM to 0620. Otherwise leave TTYGROUP commented out and assign TTYPERM to either 622 or 600.

TTYTYPE_FILE (string)

If defined, file which maps tty line to TERM environment parameter. Each line of the file is in a format something like “vt100 tty01”.

UID_MAX (number), UID_MIN (number)

useradd æ newusers åå»ºçæ®éç¨æ·çç¨æ· ID çèå´ã

UID_MIN å UID_MAX çé»è®¤å¼åå«æ¯ 1000 å 60000ã

ULIMIT (number)

é»è®¤ ulimit å¼ã

UMASK (number)

ä¹è¢« login ç¨äºæå®ç¨æ·çåå§ umaskãæ³¨æï¼æ¤æ©ç å¯ä»¥è¢«ç¨æ·ç GECOS è¡è¦ç(å½è®¾ç½®äº QUOTAS_ENAB æ¶)ï¼ä¹å¯ä»¥è¢«å¸¦ K æç¤ºç¬¦ç limits(5) å®ä¹çéå¶å¼è¦çã

USERDEL_CMD (string)

è¿ä¸ªèæ¬çè¿åå¼å¹¶ä¸è¢«å¸¦å°è´¦æ·ä¸å»ã

#! /bin/sh

# æ£æ¥éè¦çåæ°
if [ $# != 1 ]; then

		echo “Usage: $0 username”
		exit 1

# ç§»é¤ cron ä½ä¸
crontab −r −u $1

# ç§»é¤ at ä½ä¸
# æ³¨æè¿å°ç§»é¤ææå±äºåä¸ä¸ª UID çä½ä¸
# å³ä½¿æ¤ ID ç±å¤ä¸ªç¨æ·åå±äº«
AT_SPOOL_DIR=/var/spool/cron/atjobs
find $AT_SPOOL_DIR −name “[^.]*” −type f −user $1 −delete ;

# ç§»é¤ print ä½ä¸
lprm $1

# å¨é¨å®æ
exit 0

USERGROUPS_ENAB (boolean)

äº¤åå¼ç¨

chfn

CHFN_AUTH CHFN_RESTRICT LOGIN_STRING

chgpasswd

ENCRYPT_METHOD MAX_MEMBERS_PER_GROUP MD5_CRYPT_ENAB SHA_CRYPT_MAX_ROUNDS SHA_CRYPT_MIN_ROUNDS

chpasswd

ENCRYPT_METHOD MD5_CRYPT_ENAB SHA_CRYPT_MAX_ROUNDS SHA_CRYPT_MIN_ROUNDS

chsh

CHSH_AUTH LOGIN_STRING

gpasswd

ENCRYPT_METHOD MAX_MEMBERS_PER_GROUP MD5_CRYPT_ENAB SHA_CRYPT_MAX_ROUNDS SHA_CRYPT_MIN_ROUNDS

groupadd

GID_MAX GID_MIN MAX_MEMBERS_PER_GROUP SYS_GID_MAX SYS_GID_MIN

groupdel

MAX_MEMBERS_PER_GROUP

groupmems

MAX_MEMBERS_PER_GROUP

groupmod

MAX_MEMBERS_PER_GROUP

grpck

MAX_MEMBERS_PER_GROUP

grpconv

MAX_MEMBERS_PER_GROUP

grpunconv

MAX_MEMBERS_PER_GROUP

CONSOLE CONSOLE_GROUPS DEFAULT_HOME ENV_HZ ENV_PATH ENV_SUPATH ENV_TZ ENVIRON_FILE ERASECHAR FAIL_DELAY FAILLOG_ENAB FAKE_SHELL FTMP_FILE HUSHLOGIN_FILE ISSUE_FILE KILLCHAR LASTLOG_ENAB LOGIN_RETRIES LOGIN_STRING LOGIN_TIMEOUT LOG_OK_LOGINS LOG_UNKFAIL_ENAB MAIL_CHECK_ENAB MAIL_DIR MAIL_FILE MOTD_FILE NOLOGINS_FILE PORTTIME_CHECKS_ENAB QUOTAS_ENAB TTYGROUP TTYPERM TTYTYPE_FILE ULIMIT UMASK USERGROUPS_ENAB

newgrp / sg

SYSLOG_SG_ENAB

newusers

ENCRYPT_METHOD GID_MAX GID_MIN MAX_MEMBERS_PER_GROUP MD5_CRYPT_ENAB PASS_MAX_DAYS PASS_MIN_DAYS PASS_WARN_AGE SHA_CRYPT_MAX_ROUNDS SHA_CRYPT_MIN_ROUNDS SUB_GID_COUNT SUB_GID_MAX SUB_GID_MIN SUB_UID_COUNT SUB_UID_MAX SUB_UID_MIN SYS_GID_MAX SYS_GID_MIN SYS_UID_MAX SYS_UID_MIN UID_MAX UID_MIN UMASK

passwd

ENCRYPT_METHOD MD5_CRYPT_ENAB OBSCURE_CHECKS_ENAB PASS_ALWAYS_WARN PASS_CHANGE_TRIES PASS_MAX_LEN PASS_MIN_LEN SHA_CRYPT_MAX_ROUNDS SHA_CRYPT_MIN_ROUNDS

pwck

PASS_MAX_DAYS PASS_MIN_DAYS PASS_WARN_AGE

pwconv

PASS_MAX_DAYS PASS_MIN_DAYS PASS_WARN_AGE

CONSOLE CONSOLE_GROUPS DEFAULT_HOME ENV_HZ ENVIRON_FILE ENV_PATH ENV_SUPATH ENV_TZ LOGIN_STRING MAIL_CHECK_ENAB MAIL_DIR MAIL_FILE QUOTAS_ENAB SULOG_FILE SU_NAME SU_WHEEL_ONLY SYSLOG_SU_ENAB USERGROUPS_ENAB

sulogin

ENV_HZ ENV_TZ

useradd

CREATE_HOME GID_MAX GID_MIN MAIL_DIR MAX_MEMBERS_PER_GROUP PASS_MAX_DAYS PASS_MIN_DAYS PASS_WARN_AGE SUB_GID_COUNT SUB_GID_MAX SUB_GID_MIN SUB_UID_COUNT SUB_UID_MAX SUB_UID_MIN SYS_GID_MAX SYS_GID_MIN SYS_UID_MAX SYS_UID_MIN UID_MAX UID_MIN UMASK

userdel

MAIL_DIR MAIL_FILE MAX_MEMBERS_PER_GROUP USERDEL_CMD USERGROUPS_ENAB

usermod

MAIL_DIR MAIL_FILE MAX_MEMBERS_PER_GROUP

åè§

login(1), passwd(1), su(1), passwd(5), shadow(5), pam(8).

Etiquetas: 5, login, zh_CN

Páginas de manual de GNU/Linux

LOGIN.DEFS (zh_CN)

Deja un comentario Cancelar respuesta