NOME¶

login.defs - configurazione del pacchetto password shadow

DESCRIZIONE¶

The /etc/login.defs file defines the site-specific configuration for the shadow password suite. This file is required. Absence of this file will not prevent system operation, but will probably result in undesirable operation.

Questo file è un file di testo leggibile nel quale ogni riga descrive un parametro di configurazione. Le righe consistono di una coppia nome valore separati da spazi. Le righe vuote e di commento sono ignorate. I commenti iniziano con con il simbolo "#" che deve essere il primo carattere diverso da spazio della riga.

Parameter values may be of four types: strings, booleans, numbers, and long numbers. A string is comprised of any printable characters. A boolean should be either the value yes or no. An undefined boolean parameter or one with a value other than these will be given a no value. Numbers (both regular and long) may be either decimal values, octal values (precede the value with 0) or hexadecimal values (precede the value with 0x). The maximum value of the regular and long numeric parameters is machine-dependent.

Please note that the parameters in this configuration file control the behavior of the tools from the shadow-utils component. None of these tools uses the PAM mechanism, and the utilities that use PAM (such as the passwd command) should be configured elsewhere. The only values that affect PAM modules are ENCRYPT_METHOD and SHA_CRYPT_MAX_ROUNDS for pam_unix module, FAIL_DELAY for pam_faildelay module, and UMASK for pam_umask module. Refer to pam(8) for more information.

Please also take into account that this man page is generic and some of the options may be unsupported by currently installed tools. In case of doubt check sezione chiamata «RIFERIMENTI INCROCIATI» and sezione chiamata «VEDERE ANCHE». For example see login(1) for login specific options such as LOGIN_STRING.

Sono forniti i seguenti parametri di configurazione:

CHFN_AUTH (boolean)

CHFN_RESTRICT (string)

CHSH_AUTH (boolean)

CONSOLE (string)

CONSOLE_GROUPS (string)

CREATE_HOME (boolean)

DEFAULT_HOME (boolean)

ENCRYPT_METHOD (string)

ENV_HZ (string)

ENV_PATH (string)

ENV_SUPATH (string)

ENV_TZ (string)

ENVIRON_FILE (string)

ERASECHAR (number)

FAIL_DELAY (number)

FAILLOG_ENAB (boolean)

FAKE_SHELL (string)

FTMP_FILE (string)

GID_MAX (number), GID_MIN (number)

HOME_MODE (number)

HUSHLOGIN_FILE (string)

ISSUE_FILE (string)

KILLCHAR (number)

LASTLOG_ENAB (boolean)

LOG_OK_LOGINS (boolean)

LOG_UNKFAIL_ENAB (boolean)

LOGIN_RETRIES (number)

LOGIN_TIMEOUT (number)

MAIL_CHECK_ENAB (boolean)

MAIL_DIR (string)

MAIL_FILE (string)

The MAIL_DIR and MAIL_FILE variables are used by useradd, usermod, and userdel to create, move, or delete the user's mail spool.

If MAIL_CHECK_ENAB is set to yes, they are also used to define the MAIL environment variable.

MAX_MEMBERS_PER_GROUP (number)

MD5_CRYPT_ENAB (boolean)

MOTD_FILE (string)

NOLOGINS_FILE (string)

OBSCURE_CHECKS_ENAB (boolean)

PASS_ALWAYS_WARN (boolean)

PASS_CHANGE_TRIES (number)

PASS_MAX_DAYS (number)

PASS_MIN_DAYS (number)

PASS_WARN_AGE (number)

PASS_MAX_DAYS, PASS_MIN_DAYS and PASS_WARN_AGE are only used at the time of account creation. Any changes to these settings won't affect existing accounts.

PASS_MAX_LEN (number), PASS_MIN_LEN (number)

PORTTIME_CHECKS_ENAB (boolean)

QUOTAS_ENAB (boolean)

SHA_CRYPT_MIN_ROUNDS (number), SHA_CRYPT_MAX_ROUNDS (number)

SULOG_FILE (string)

SU_NAME (string)

SU_WHEEL_ONLY (boolean)

SUB_GID_MIN (number), SUB_GID_MAX (number), SUB_GID_COUNT (number)

SUB_UID_MIN (number), SUB_UID_MAX (number), SUB_UID_COUNT (number)

SYS_GID_MAX (number), SYS_GID_MIN (number)

SYS_UID_MAX (number), SYS_UID_MIN (number)

SYSLOG_SG_ENAB (boolean)

SYSLOG_SU_ENAB (boolean)

TTYGROUP (string), TTYPERM (string)

TTYTYPE_FILE (string)

UID_MAX (number), UID_MIN (number)

ULIMIT (number)

UMASK (number)

USERDEL_CMD (string)

#! /bin/sh
# Check for the required argument.
if [ $# != 1 ]; then
	echo "Usage: $0 username"
	exit 1
fi
# Remove cron jobs.
crontab -r -u $1
# Remove at jobs.
# Note that it will remove any jobs owned by the same UID,
# even if it was shared by a different username.
AT_SPOOL_DIR=/var/spool/cron/atjobs
find $AT_SPOOL_DIR -name "[^.]*" -type f -user $1 -delete \;
# Remove print jobs.
lprm $1
# All done.
exit 0


      

USERGROUPS_ENAB (boolean)

RIFERIMENTI INCROCIATI¶

I seguenti riferimenti incrociati mostrano quali programmi del pacchetto shadow password utilizzano quali parametri.

chgpasswd

chpasswd

gpasswd

groupadd

groupdel

groupmems

groupmod

grpck

grpconv

grpunconv

newgrp / sg

newusers

pwck

pwconv

useradd

userdel

usermod

VEDERE ANCHE¶

login(1), passwd(1), su(1), passwd(5), shadow(5), pam(8).