From owner-freebsd-stable Tue Dec 12 22:57:23 2000 From owner-freebsd-stable@FreeBSD.ORG Tue Dec 12 22:57:20 2000 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from linux.ssc.nsu.ru (linux.ssc.nsu.ru [193.124.219.91]) by hub.freebsd.org (Postfix) with SMTP id 3E70937B400 for ; Tue, 12 Dec 2000 22:56:53 -0800 (PST) Received: (qmail 885 invoked from network); 13 Dec 2000 06:56:43 -0000 Received: from inet.ssc.nsu.ru (62.76.110.12) by hub.freebsd.org with SMTP; 13 Dec 2000 06:56:43 -0000 Received: from localhost (danfe@localhost) by inet.ssc.nsu.ru (8.9.3/8.9.3) with ESMTP id MAA03433; Wed, 13 Dec 2000 12:56:20 +0600 Date: Wed, 13 Dec 2000 12:56:19 +0600 (NOVT) From: Alexey Dokuchaev To: =?ISO-8859-1?Q?Trond_Endrest=F8l?= Cc: FreeBSD questions , FreeBSD stable Subject: Re: How come accounting limits of login.conf still doesn't work?! In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=KOI8-R Content-Transfer-Encoding: 8BIT Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Tue, 12 Dec 2000, [ISO-8859-1] Trond Endrestøl wrote: > On Tue, 12 Dec 2000, Alexey Dokuchaev wrote: > > > How come that all kewl features, such as sessionlimits, idletimes, etc all > > are documented in man login.conf(5), but never seemed to work? It's 4.2 > > already, and it still doesn't make any difference? > > One thought springs to mind, did you run > > cap_mkdb /etc/login.conf Yup, I've done this, of course. Well, technically, most of the limits (which do not involve hanging of special process to handle idletimes) work when logging in from console only. This is not quite what I need, since most of the users on my box would have ssh access only. Under linux, I used to configure PAM settings, and they applied to the user session, independent from the authentication method. Actually, PAM support in FreeBSD still seems pretty weak to me. The whole idea seems kinda, uhm... impractical, should I say? I am in no way trying to criticize the developers, I simply want those limits to be easily and uniformally configurable, and work not when logging from the console only but with ssh as well. Maybe I'm doing/getting anything wrong? Thank you. -- Yours, DAN Fe To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message