Linux Certif

Toute la documentation sur la certification Linux LPI

login.defs

̾Á°

/etc/login.defs - shadow ¥Ñ¥¹¥ï¡¼¥Éµ¡Ç½¤ÎÀßÄê

ÀâÌÀ

/etc/login.defs ¥Õ¥¡¥¤¥ë¤Ï shadow ¥í¥°¥¤¥óµ¡Ç½¤ËÂФ¹¤ë¥µ¥¤¥È¸ÇÍ­¤ÎÀßÄê¤òÄêµÁ¤¹¤ë¡£ ¤³¤Î¥Õ¥¡¥¤¥ë¤Ïɬ¤ºÂ¸ºß¤·¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤¡£ ¤³¤Î¥Õ¥¡¥¤¥ë¤¬Ìµ¤¯¤Æ¤â¥·¥¹¥Æ¥à±¿ÍѤϲÄǽ¤Ç¤¢¤ë¤¬¡¢ ¤ª¤½¤é¤¯Ë¾¤Þ¤Ê¤¤·ë²Ì¤È¤Ê¤ë¤À¤í¤¦¡£

¤³¤Î¥Õ¥¡¥¤¥ë¤ÏÆɤ߼è¤ê²Äǽ¤Ê¥Æ¥­¥¹¥È¥Õ¥¡¥¤¥ë¤Ç¡¢ ¥Õ¥¡¥¤¥ëÃæ¤Î°ì¹Ô¤Ë¤Ä¤­°ì¤Ä¤ÎÀßÄê¥Ñ¥é¥á¡¼¥¿¤òÀßÄꤷ¤Æ¤¤¤ë¡£ ³Æ¹Ô¤Ç¤Ï¡¢ÀßÄê¥Ñ¥é¥á¡¼¥¿¤Î̾Á°¤È¤½¤ÎÃͤ¬¶õÇò¤Ç¶èÀÚ¤é¤ì¤Æ¼¨¤µ¤ì¤ë¡£ ¶õ¹Ô¤È¥³¥á¥ó¥È¹Ô¤Ï̵»ë¤µ¤ì¤ë¡£ ¥³¥á¥ó¥È¹Ô¤Ï `#' µ­¹æ¤Ç»Ï¤Þ¤ë¡£ µ­¹æ`#'¤Ï¤½¤Î¹Ô¤Ç¤Î¶õÇò°Ê³°¤ÎºÇ½é¤Îʸ»ú¤Ç¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤¡£

¥Ñ¥é¥á¡¼¥¿ÃͤϻͤĤη¿¤ò¼è¤ë¤³¤È¤¬¤Ç¤­¤ë¡£ ʸ»úÎ󡦥֡¼¥ë·¿¡¦¿ôÃÍ¡¦ÇÜÀºÅÙ¿ôÃÍ¡¢¤Ç¤¢¤ë¡£ ʸ»úÎó¤Ë¤ÏÁ´¤Æ¤Î°õ»ú²Äǽʸ»ú¤ò»È¤¨¤ë¡£ ¥Ö¡¼¥ë·¿¥Ñ¥é¥á¡¼¥¿¤ÎÃÍ¤Ï ``yes'' ¤« ``no'' ¤Î¤¤¤º¤ì¤«¤Ç¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤¡£ ÃͤλØÄꤵ¤ì¤Æ¤¤¤Ê¤¤¥Ö¡¼¥ë·¿¥Ñ¥é¥á¡¼¥¿¤ä¡¢ ``yes'', ``no'' °Ê³°¤¬»ØÄꤵ¤ì¤¿¥Ö¡¼¥ë·¿¥Ñ¥é¥á¡¼¥¿¤ÎÃÍ¤Ï ``no''¤È¤µ¤ì¤ë¡£ (ñÀºÅÙ¤ª¤è¤ÓÇÜÀºÅÙ) ¿ôÃͤϡ¢ 10 ¿Ê¿ô¡¢ (¿ôÃͤÎÁ°¤Ë ``0'' ¤òÉÕ¤±¤¿) 8 ¿Ê¿ô¡¢ (¿ôÃͤÎÁ°¤Ë ``0x'' ¤òÉÕ¤±¤¿) 16 ¿Ê¿ô¤Î¤¤¤º¤ì¤«¤Ç»ØÄꤹ¤ë¡£ ñÀºÅÙ¡¦ÇÜÀºÅÙ¿ôÃͥѥé¥á¡¼¥¿¤ÎºÇÂçÃͤϷ׻»µ¡¤Ë°Í¸¤¹¤ë¡£

°Ê²¼¤Ë¼¨¤¹¤è¤¦¤ÊÀßÄê¹àÌܤ¬¤¢¤ë:

CHFN_AUTH (¥Ö¡¼¥ëÃÍ)

¤â¤· yes ¤Ê¤é¡¢ chfn, chsh ξ¥×¥í¥°¥é¥à¤Ï¡¢¥¹¡¼¥Ñ¡¼¥æ¡¼¥¶¤¬µ¯Æ°¤·¤¿¤Î¤Ç¤Ê¤¤¸Â¤ê ²¿¤é¤«¤ÎÊѹ¹¤ò¹Ô¤Ê¤¦Á°¤Ë¥Ñ¥¹¥ï¡¼¥É¤ò¿Ò¤Í¤ë¡£

CHFN_RESTRICT (ʸ»úÎó)

¤³¤Î¥Ñ¥é¥á¡¼¥¿¤Ï passwd ¥Õ¥¡¥¤¥ë¤Î gecos ¥Õ¥£¡¼¥ë¥É¤Î¤¦¤Á¡¢ °ìÈ̥桼¥¶¤¬ chfn ¤ò»È¤Ã¤ÆÊѹ¹¤Ç¤­¤ë¥Õ¥£¡¼¥ë¥É¤ò»ØÄꤹ¤ë¡£ »ØÄꤹ¤ëʸ»úÎó¤Ï f, r, w, h ³Æʸ»ú¤ÎǤ°Õ¤ÎÁȤ߹ç¤ï¤»¤Ç¡¢¤½¤ì¤¾¤ì¥Õ¥ë¥Í¡¼¥à¡¢Éô²°Èֹ桢 ¿¦¾ìÅÅÏÃÈֹ桢¼«ÂðÅÅÏÃÈÖ¹æ¤ò°ÕÌ£¤¹¤ë¡£ »ØÄꤵ¤ì¤Ê¤«¤Ã¤¿¾ì¹ç¤Ï¡¢¥¹¡¼¥Ñ¡¼¥æ¡¼¥¶¤À¤±¤¬Á´¤Æ¤Î¹àÌܤòÊѹ¹¤Ç¤­¤ë¡£ ºÇ¤âÀ©¸Â¤ò¤­¤Ä¤¯¤·¤¿¤¤¾ì¹ç¤Ï¡¢ chfn ¤ò SUID ¤Ç¤Ï¥¤¥ó¥¹¥È¡¼¥ë¤·¤Ê¤±¤ì¤Ð¤è¤¤¡£

CREATE_HOME (¥Ö¡¼¥ëÃÍ)

useradd ¤¬¡¢¥Ç¥Õ¥©¥ë¥È¤Ç¥æ¡¼¥¶¤Î¥Û¡¼¥à¥Ç¥£¥ì¥¯¥È¥ê¤ò ºîÀ®¤¹¤ë¤«¤É¤¦¤«¤òÄêµÁ¤¹¤ë¡£ ¤³¤Î¥ª¥×¥·¥ç¥ó¤Ï useradd ¤Î¥³¥Þ¥ó¥É¥é¥¤¥ó¤Î -m ¥Õ¥é¥°¤È OR ¤µ¤ì¤ë¡£

GID_MAX (¿ôÃÍ)

GID_MIN (¿ôÃÍ)

useradd ¥×¥í¥°¥é¥à¤ª¤è¤Ó groupadd ¥×¥í¥°¥é¥à¤¬¥°¥ë¡¼¥× ID ¤òÁªÂò¤¹¤ë»þ¤ÎÈÏ°Ï¡£

MAIL_DIR (ʸ»úÎó)

¥á¡¼¥ë¥¹¥×¡¼¥ë¥Ç¥£¥ì¥¯¥È¥ê¡£ ¤¢¤ë¥æ¡¼¥¶¥¢¥«¥¦¥ó¥È¤¬½¤Àµ¡¦ºï½ü¤µ¤ì¤¿ºÝ¤Ë¡¢ ¤½¤Î¥æ¡¼¥¶¤Î¥á¡¼¥ë¥Ü¥Ã¥¯¥¹¤ËÂФ¹¤ëºî¶È¤Î¤¿¤á¤ËɬÍפȤʤ롣 »ØÄꤵ¤ì¤Ê¤¤¤È¡¢¥³¥ó¥Ñ¥¤¥ë»þ¤Î¥Ç¥Õ¥©¥ë¥ÈÃͤ¬ÍѤ¤¤é¤ì¤ë¡£

PASS_MAX_DAYS (¿ôÃÍ)

°ì¤Ä¤Î¥Ñ¥¹¥ï¡¼¥É¤ò»È¤¨¤ëºÇĹÆü¿ô¡£ ¥Ñ¥¹¥ï¡¼¥É¤¬¤³¤ÎÆü¿ô¤è¤ê¤â¸Å¤¤¾ì¹ç¤Ï¡¢Êѹ¹¤¹¤ë¤è¤¦¶¯À©¤µ¤ì¤ë¡£ »ØÄꤵ¤ì¤Æ¤¤¤Ê¤¤¾ì¹ç¤Ï -1 ¤È¤Ê¤ë (¤³¤ÎÀ©¸Âµ¡Ç½¤ò̵¸ú¤Ë¤¹¤ë)¡£

PASS_MIN_DAYS (¿ôÃÍ)

¥Ñ¥¹¥ï¡¼¥É¤òÊѹ¹¤·¤Æ¤«¤é¼¡¤ËÊѹ¹¤Ç¤­¤ë¤è¤¦¤Ë¤Ê¤ë¤Þ¤Ç¤ÎºÇûÆü¿ô¡£ ¤³¤ÎÆü¿ô¤¬·Ð¤¿¤Ê¤¤¤¦¤Á¤Ë¥Ñ¥¹¥ï¡¼¥É¤òÊѹ¹¤·¤è¤¦¤È¤·¤Æ¤âµñÈݤµ¤ì¤ë¡£ »ØÄꤵ¤ì¤Æ¤¤¤Ê¤¤¾ì¹ç¤Ï -1 ¤È¤Ê¤ë (¤³¤ÎÀ©¸Âµ¡Ç½¤ò̵¸ú¤Ë¤¹¤ë)¡£

PASS_WARN_AGE (¿ôÃÍ)

¥Ñ¥¹¥ï¡¼¥É¤ÎÍ­¸ú´ü¸Â¤¬Íè¤ëÁ°¤Ë·Ù¹ð¤òȯ¤¹¤ë´ü´Ö¤ÎÆü¿ô¡£ ¥¼¥í¤Ë¤·¤Æ¤ª¤¯¤È¡¢´ü¸ÂÀÚ¤ì¤ÎÅöÆü¤Ë¤Î¤ß·Ù¹ð¤ò¹Ô¤¤¡¢ Éé¤Î¿ô¤ò»ØÄꤷ¤¿¾ì¹ç¤Ï°ìÀÚ·Ù¹ð¤ò¹Ô¤ï¤Ê¤¤¡£ »ØÄꤵ¤ì¤Æ¤¤¤Ê¤¤¾ì¹ç¤Ï·Ù¹ð¤ò¹Ô¤ï¤Ê¤¤¡£

PASS_MAX_DAYS, PASS_MIN_DAYS, PASS_WARN_AGE ¤Ï¥¢¥«¥¦¥ó¥È¤òºî¤ë¤È¤­¤Ë¤À¤±ÍøÍѤµ¤ì¤ë¡£ ¤³¤ì¤é¤ÎÀßÄê¤òÊѹ¹¤·¤Æ¤â¡¢´û¸¤Î¥¢¥«¥¦¥ó¥È¤Ë¤Ï±Æ¶Á¤·¤Ê¤¤¡£

UID_MAX (¿ôÃÍ)

UID_MIN (¿ôÃÍ)

useradd ¥×¥í¥°¥é¥à¤¬¥æ¡¼¥¶ ID ¤òÁªÂò¤¹¤ë»þ¤ÎÈÏ°Ï¡£

UMASK (¿ôÃÍ)

µö²Ä°À­¥Þ¥¹¥¯¤ò¤³¤ÎÃͤ˽é´ü²½¤¹¤ë¡£ »ØÄꤵ¤ì¤Æ¤¤¤Ê¤¤¾ì¹ç¤Ï¡¢µö²Ä°À­¥Þ¥¹¥¯¤Ï 077 ¤Ë½é´ü²½¤µ¤ì¤ë¡£

USERDEL_CMD (ʸ»úÎó)

ÄêµÁ¤µ¤ì¤Æ¤¤¤ë¤È¡¢¥æ¡¼¥¶¤òºï½ü¤¹¤ë¤È¤­¤Ë¤³¤Î¥³¥Þ¥ó¥É¤¬¼Â¹Ô¤µ¤ì¤ë¡£ ºï½ü¤µ¤ì¤ë¥æ¡¼¥¶ (ºÇ½é¤Î°ú¤­¿ô¤ËÅϤµ¤ì¤ë) ¤Î at/cron/print ¥¸¥ç¥Ö¤Ê¤É¤òºï½ü¤¹¤ë¥³¥Þ¥ó¥É¤Ë¤·¤Æ¤ª¤¯¤È¤è¤¤¡£

»²¾Èɽ

°Ê²¼¤Î»²¾Èɽ¤Ï¡¢ shadow ¥Ñ¥¹¥ï¡¼¥Éµ¡Ç½¤Î¤É¤Î¥×¥í¥°¥é¥à¤¬ ¤É¤Î¥Ñ¥é¥á¡¼¥¿¤ò»ÈÍѤ¹¤ë¤«¤ò¼¨¤·¤¿¤â¤Î¤Ç¤¢¤ë¡£

chfn

CHFN_AUTH CHFN_RESTRICT

chsh

CHFN_AUTH

groupadd

GID_MAX GID_MIN

newusers

PASS_MAX_DAYS PASS_MIN_DAYS PASS_WARN_AGE UMASK

pwconv

PASS_MAX_DAYS PASS_MIN_DAYS PASS_WARN_AGE

useradd

CREATE_HOME GID_MAX GID_MIN PASS_MAX_DAYS PASS_MIN_DAYS PASS_WARN_AGE UID_MAX UID_MIN UMASK

userdel

MAIL_DIR USERDEL_CMD

usermod

MAIL_DIR

¥Ð¥°

shadow ¥Ñ¥¹¥ï¡¼¥Éµ¡Ç½¤Ë¤è¤Ã¤ÆÄ󶡤µ¤ì¤Æ¤­¤¿µ¡Ç½¤ÎÂçÉôʬ¤Ï¡¢ ¸½ºß¤Ï PAM ¤Ë¤è¤Ã¤Æ½èÍý¤µ¤ì¤Æ¤¤¤ë¡£ ¤·¤¿¤¬¤Ã¤Æ¡¢ login(1), passwd(1), su(1) ¤Ê¤É¤Î¥×¥í¥°¥é¥à¤Ï¡¢¤â¤Ï¤ä /etc/login.defs ¤òÍѤ¤¤Ê¤¤¡£ Âбþ¤¹¤ë PAM ¤ÎÀßÄê¥Õ¥¡¥¤¥ë¤òÄ´¤Ù¤ë¤è¤¦¤Ë¤·¤Æ¤Û¤·¤¤¡£

´ØÏ¢¹àÌÜ

login(1), passwd(1), su(1), passwd(5), shadow(5), pam(8)

Ãø¼Ô

Julianne Frances Haugh (jockgrrl@ix.netcom.com)
Chip Rosenthal (chip@unicom.com)