3 |
- |
1 |
#
|
|
|
2 |
# Please note that the parameters in this configuration file control the
|
|
|
3 |
# behavior of the tools from the shadow-utils component. None of these
|
|
|
4 |
# tools uses the PAM mechanism, and the utilities that use PAM (such as the
|
|
|
5 |
# passwd command) should therefore be configured elsewhere. Refer to
|
|
|
6 |
# /etc/pam.d/system-auth for more information.
|
|
|
7 |
#
|
|
|
8 |
|
|
|
9 |
# *REQUIRED*
|
|
|
10 |
# Directory where mailboxes reside, _or_ name of file, relative to the
|
|
|
11 |
# home directory. If you _do_ define both, MAIL_DIR takes precedence.
|
|
|
12 |
# QMAIL_DIR is for Qmail
|
|
|
13 |
#
|
|
|
14 |
#QMAIL_DIR Maildir
|
|
|
15 |
MAIL_DIR /var/spool/mail
|
|
|
16 |
#MAIL_FILE .mail
|
|
|
17 |
|
|
|
18 |
# Password aging controls:
|
|
|
19 |
#
|
|
|
20 |
# PASS_MAX_DAYS Maximum number of days a password may be used.
|
|
|
21 |
# PASS_MIN_DAYS Minimum number of days allowed between password changes.
|
|
|
22 |
# PASS_MIN_LEN Minimum acceptable password length.
|
|
|
23 |
# PASS_WARN_AGE Number of days warning given before a password expires.
|
|
|
24 |
#
|
|
|
25 |
PASS_MAX_DAYS 99999
|
|
|
26 |
PASS_MIN_DAYS 0
|
|
|
27 |
PASS_MIN_LEN 5
|
|
|
28 |
PASS_WARN_AGE 7
|
|
|
29 |
|
|
|
30 |
#
|
|
|
31 |
# Min/max values for automatic uid selection in useradd
|
|
|
32 |
#
|
|
|
33 |
UID_MIN 500
|
|
|
34 |
UID_MAX 60000
|
|
|
35 |
|
|
|
36 |
#
|
|
|
37 |
# Min/max values for automatic gid selection in groupadd
|
|
|
38 |
#
|
|
|
39 |
GID_MIN 500
|
|
|
40 |
GID_MAX 60000
|
|
|
41 |
|
|
|
42 |
#
|
|
|
43 |
# If defined, this command is run when removing a user.
|
|
|
44 |
# It should remove any at/cron/print jobs etc. owned by
|
|
|
45 |
# the user to be removed (passed as the first argument).
|
|
|
46 |
#
|
|
|
47 |
#USERDEL_CMD /usr/sbin/userdel_local
|
|
|
48 |
|
|
|
49 |
#
|
|
|
50 |
# If useradd should create home directories for users by default
|
|
|
51 |
# On RH systems, we do. This option is overridden with the -m flag on
|
|
|
52 |
# useradd command line.
|
|
|
53 |
#
|
|
|
54 |
CREATE_HOME yes
|
|
|
55 |
|
|
|
56 |
# The permission mask is initialized to this value. If not specified,
|
|
|
57 |
# the permission mask will be initialized to 022.
|
|
|
58 |
UMASK 077
|
|
|
59 |
|
|
|
60 |
# This enables userdel to remove user groups if no members exist.
|
|
|
61 |
#
|
|
|
62 |
USERGROUPS_ENAB yes
|
|
|
63 |
|
|
|
64 |
# Use SHA512 to encrypt password.
|
|
|
65 |
ENCRYPT_METHOD SHA512
|
|
|
66 |
|