1# $OpenBSD: login.conf,v 1.27 2025/07/17 14:44:42 landry Exp $
  2
  3#
  4# Sample login.conf file.  See login.conf(5) for details.
  5#
  6
  7#
  8# Standard authentication styles:
  9#
 10# passwd	Use only the local password file
 11# chpass	Do not authenticate, but change user's password (change
 12#		the YP password if the user has one, else change the
 13#		local password)
 14# lchpass	Do not login; change user's local password instead
 15# ldap		Use LDAP authentication
 16# radius	Use RADIUS authentication
 17# reject	Use rejected authentication
 18# skey		Use S/Key authentication
 19# activ		ActivCard X9.9 token authentication
 20# crypto	CRYPTOCard X9.9 token authentication
 21# snk		Digital Pathways SecureNet Key authentication
 22# token		Generic X9.9 token authentication
 23# yubikey	YubiKey authentication
 24#
 25
 26# Default allowed authentication styles
 27auth-defaults:auth=passwd,skey:
 28
 29# Default allowed authentication styles for authentication type ftp
 30auth-ftp-defaults:auth-ftp=passwd:
 31
 32#
 33# The default values
 34# To alter the default authentication types change the line:
 35#	:tc=auth-defaults:\
 36# to read something like: (enables passwd, "myauth", and activ)
 37#	:auth=passwd,myauth,activ:\
 38# Any value changed in the daemon class should be reset in default
 39# class.
 40#
 41default:\
 42	:path=/usr/bin /bin /usr/sbin /sbin /usr/X11R6/bin /usr/local/bin /usr/local/sbin:\
 43	:umask=022:\
 44	:datasize-max=1536M:\
 45	:datasize-cur=1536M:\
 46	:maxproc-max=256:\
 47	:maxproc-cur=128:\
 48	:openfiles-max=1024:\
 49	:openfiles-cur=512:\
 50	:stacksize-cur=4M:\
 51	:localcipher=blowfish,a:\
 52	:tc=auth-defaults:\
 53	:tc=auth-ftp-defaults:
 54
 55#
 56# Settings used by /etc/rc and root
 57# This must be set properly for daemons started as root by inetd as well.
 58# Be sure to reset these values to system defaults in the default class!
 59#
 60daemon:\
 61	:ignorenologin:\
 62	:datasize=4096M:\
 63	:maxproc=infinity:\
 64	:openfiles-max=1024:\
 65	:openfiles-cur=128:\
 66	:stacksize-cur=8M:\
 67	:tc=default:
 68
 69#
 70# Staff have fewer restrictions and can login even when nologins are set.
 71#
 72staff:\
 73	:datasize-cur=12288M:\
 74	:datasize-max=infinity:\
 75	:maxproc-max=4096:\
 76	:maxproc-cur=2048:\
 77	:openfiles-max=8192:\
 78	:openfiles-cur=4096:\
 79	:stacksize-max=64M:\
 80	:stacksize-cur=32M:\
 81	:ignorenologin:\
 82	:requirehome@:\
 83	:tc=default:
 84
 85#
 86# Authpf accounts get a special motd and shell
 87#
 88authpf:\
 89	:welcome=/etc/motd.authpf:\
 90	:shell=/usr/sbin/authpf:\
 91	:tc=default:
 92
 93#
 94# Building LLVM in base requires higher limits
 95#
 96build:\
 97	:datasize-max=2560M:\
 98	:datasize-cur=2560M:\
 99	:tc=default:
100
101#
102# Building ports with DPB uses raised limits
103#
104pbuild:\
105	:datasize-max=infinity:\
106	:datasize-cur=12G:\
107	:maxproc-max=1024:\
108	:maxproc-cur=512:\
109	:stacksize-cur=8M:\
110	:priority=5:\
111	:tc=default:
112
113#
114# Override resource limits for certain daemons started by rc.d(8)
115#
116bgpd:\
117	:datasize=16384M:\
118	:openfiles=512:\
119	:tc=daemon:
120
121unbound:\
122	:openfiles=512:\
123	:tc=daemon:
124
125vmd:\
126	:datasize=16384M:\
127	:tc=daemon:
128
129xenodm:\
130	:openfiles=512:\
131	:tc=daemon: