.\" Copyright (c) 1991, 2008 Ollivier Robert
.\" All rights reserved.
.\"
.\" Redistribution and use in source and binary forms, with or without
.\" modification, are permitted under the GNU General Public Licence.
.\" Look into the COPYING file.
.\"
.\" @(#) $Id: calife.auth.5.in,v 88c4f70961ac 2008/08/19 17:34:11 roberto $
.\""
.Dd September 25, 1994
.Dt CALIFE.AUTH 5
.Os
.Sh NAME
.Nm calife.auth
.Nd format of the calife authorization file
.Sh DESCRIPTION
The
.Nm calife.auth
files are files consisting of newline separated records, one per user,
containing three colon (``:'') separated fields.  These fields are as
follows:
.Pp
.Bl -tag -width shell -offset indent
.It Ar name
User's login name /
.Ar @group .
.It Ar shell
User's shell
.It Ar user1,user2,...,usern
List of logins allowed for the user name
.El
.Pp
The
.Ar name
field is the login used to access the computer account.
.Pp
The login name must never begin with a hyphen (``-''); also, it is strongly
suggested that neither upper-case characters or dots (``.'') be part
of the name, as this tends to confuse mailers.  No field may contain a
colon (``:'') as this has been used historically to separate the fields
in the user database.
.Pp
One alternative syntax is to use
.Ar @group
to specify that any user in the given
.Ar group
is allowed to use
.Nm calife
to become root.
.Pp
The
.Ar shell
field is the command interpreter the user prefers.
If there is nothing in the
.Ar shell
field, the user's current shell as found in the
.Pq Pa /etc/passwd
file is assumed.
.Pp
If the
.Ar shell
field is '*', then the account is considered as
.Ar locked
and access is denied.
.Pp
If the third parameter is specified, it is assumed to be the list of
login the current user has the right to become. It enables use of
.Nm calife
for non-root only accounts.
.Pp
.Nm calife.auth
is placed in
.Ar /etc .
.Sh EXAMPLE
.Bd -literal
# calife.auth-dist
#
# Format
#
# name[:shell_to_be_run][:user1,user2,usern]
#
fcb
roberto:/bin/tcsh
pb::guest,blaireau
.Ed
.Sh SEE ALSO
.Xr calife 1 ,
.Xr su 1
.Sh HISTORY
A
.Nm
file format appeared in DG/UX and SunOS, written for Antenne 2 in 1991. It
has evolved with the extra shell specification. The login list was
reintroduced in 2.7.
.Sh AUTHOR
Ollivier Robert <roberto@keltia.frmug.fr.net>