[사용자관리파일]/etc/login.defs

</etc/login.defs>

메일디렉터리, 패스워드관련설정, UID의최솟값및최대값, GID의최솟값및최대값, 홈디렉터리생성여부,

기본UMASK값등을 정의한 파일

useradd가 새로운 계정을 생성할 때에 참조하는 파일

 

[root@localhost ~]# cat /etc/login.defs
#
# Please note that the parameters in this configuration file control the
# behavior of the tools from the shadow-utils component. None of these
# tools uses the PAM mechanism, and the utilities that use PAM (such as the
# passwd command) should therefore be configured elsewhere. Refer to
# /etc/pam.d/system-auth for more information.
#

# *REQUIRED*
#   Directory where mailboxes reside, _or_ name of file, relative to the
#   home directory.  If you _do_ define both, MAIL_DIR takes precedence.
#   QMAIL_DIR is for Qmail
#
#QMAIL_DIR      Maildir
MAIL_DIR        /var/spool/mail
#MAIL_FILE      .mail

# Password aging controls:
#
#       PASS_MAX_DAYS   Maximum number of days a password may be used.
#       PASS_MIN_DAYS   Minimum number of days allowed between password changes.
#       PASS_MIN_LEN    Minimum acceptable password length.
#       PASS_WARN_AGE   Number of days warning given before a password expires.
#
PASS_MAX_DAYS   99999
PASS_MIN_DAYS   0
PASS_MIN_LEN    5
PASS_WARN_AGE   7

#
# Min/max values for automatic uid selection in useradd
#
UID_MIN                  1000
UID_MAX                 60000
# System accounts
SYS_UID_MIN               201
SYS_UID_MAX               999

#
# Min/max values for automatic gid selection in groupadd
#
GID_MIN                  1000
GID_MAX                 60000
# System accounts
SYS_GID_MIN               201
SYS_GID_MAX               999

#
# If defined, this command is run when removing a user.
# It should remove any at/cron/print jobs etc. owned by
# the user to be removed (passed as the first argument).
#
#USERDEL_CMD    /usr/sbin/userdel_local

#
# If useradd should create home directories for users by default
# On RH systems, we do. This option is overridden with the -m flag on
# useradd command line.
#
CREATE_HOME     yes

# The permission mask is initialized to this value. If not specified,
# the permission mask will be initialized to 022.
UMASK           077

# This enables userdel to remove user groups if no members exist.
#
USERGROUPS_ENAB yes

# Use SHA512 to encrypt password.
ENCRYPT_METHOD SHA512

 

<주요 항목>

MAIL_DIR	/var/spool/mail	사용자의 메일 디렉터리를 지정
PASS_MAX_DAYS	99999	패스워드 최대 사용기간을 지정
PASS_MIN_DAYS	0	패스워드 변경 후에 사용하는 최소 기간을 지정
PASS_WARN_AGE	7	패스워드만기일전에경고를보여주는날짜
UID_MIN	10000	UID최소값지정(UID 시작번호)
UID_MAX	60000	UID최대값지정(UID 최대번호)
GID_MIX	1000	GID최소값지정(GID 시작번호)
GID_MAX	60000	GID최대값지정(GID 최대번호)
CREATE_HOME	yes	사용자 추가시에 홈 디렉터리 생성 여부를 지정
UMASK	077	사용자의 umask값을 설정(기본값 022)