1
# GDM Configuration file.
3
# You should not update this file by hand. Since GDM 2.13.0.4, configuration
4
# choices in the gdm.conf-custom file will override the default values
5
# specified in this file. This file may be overwritten on upgrade, so to
6
# ensure that your configuration choices are not lost, please make sure that
7
# your modifications are only made to the gdm.conf-custom file. If you were
8
# using a previous version of GDM and had made changes to your gdm.conf file,
9
# this file should have been automatically renamed as gdm.conf-custom to ensure
10
# that your previous modifications are preserved.
12
# You can use the gdmsetup program to graphically edit the gdm.conf-custom
13
# file. Note that gdmsetup does not support every option in this file, just
14
# the ones that most users want to change. If you feel that gdmsetup should
15
# support additional configuratio options, please file a bug report at
16
# http://bugzilla.gnome.org/.
18
# If you hand-edit the GDM configuration, you should run the following command
19
# to get the GDM daemon to recognize the change. Any running GDM GUI programs
20
# will also be notified to update with the new configuration.
22
# gdmflexiserver --command="UPDATE_CONFIG <configuration key>"
24
# For example, the "Enable" key in the "[debug]" section would be specified by
27
# You can also run gdm-restart or gdm-safe-restart to cause GDM to restart and
28
# re-read the new configuration settings. You can also restart GDM by sending
29
# a HUP or USR1 signal to the daemon. HUP behaves like gdm-restart and causes
30
# any user session started by GDM to exit immediately while USR1 behaves like
31
# gdm-safe-restart and will wait until all users log out before restarting GDM.
33
# For full reference documentation see the GNOME help browser under
34
# GNOME|System category. You can also find the docs in HTML form on
35
# http://www.gnome.org/projects/gdm/
37
# NOTE: Some values are commented out but show their default values. Lines
38
# that begin with "#" are considered comments.
43
# Automatic login, if true the first local screen will automatically logged in
44
# as user as set with AutomaticLogin key.
45
AutomaticLoginEnable=false
48
# Timed login, useful for kiosks. Log in a certain user after a certain amount
50
TimedLoginEnable=false
54
# The GDM configuration program that is run from the login screen, you should
55
# probably leave this alone.
56
#Configurator=/usr/sbin/gdmsetup --disable-sound --disable-crash-dialog
58
# The chooser program. Must output the chosen host on stdout, probably you
59
# should leave this alone.
60
#Chooser=/usr/lib/gdm/gdmchooser
62
# The greeter for local (non-xdmcp) logins. Change gdmlogin to gdmgreeter to
63
# get the new graphical greeter.
64
Greeter=/usr/lib/gdm/gdmgreeter
66
# The greeter for xdmcp logins, usually you want a less graphically intensive
67
# greeter here so it's better to leave this with gdmlogin
68
#RemoteGreeter=/usr/lib/gdm/gdmlogin
70
# Launch the greeter with an additional list of colon separated GTK+ modules.
71
# This is useful for enabling additional feature support e.g. GNOME
72
# accessibility framework. Only "trusted" modules should be allowed to minimize
75
# By default, these are the accessibility modules.
76
#GtkModulesList=gail:atk-bridge:/usr/lib/gtk-2.0/modules/libdwellmouselistener:/usr/lib/gtk-2.0/modules/libkeymouselistener
78
# Default path to set. The profile scripts will likely override this value.
79
# This value will be overridden with the value from /etc/default/login if it
80
# contains "ROOT=<pathvalue>".
81
#DefaultPath=/usr/local/bin:/usr/local/sbin:/sbin:/usr/sbin:/bin:/usr/bin:/usr/bin/X11:/usr/games
82
# Default path for root. The profile scripts will likely override this value.
83
# This value will be overridden with the value from /etc/default/login if it
84
# contains "SUROOT=<pathvalue>".
85
#RootPath=/usr/local/bin:/usr/local/sbin:/sbin:/usr/sbin:/bin:/usr/bin:/usr/bin/X11:/usr/games
87
# If you are having trouble with using a single server for a long time and want
88
# GDM to kill/restart the server, turn this on. On Solaris, this value is
89
# always true and this configuration setting is ignored.
90
#AlwaysRestartServer=false
92
# User and group used for running GDM GUI applicaitons. By default this is set
93
# to user "gdm" and group "gdm". This user/group should have very limited
94
# permissions and access to ony the gdm directories and files.
98
# To try to kill all clients started at greeter time or in the Init script.
99
# does not always work, only if those clients have a window of their own.
100
#KillInitClients=true
102
# You should probably never change this value unless you have a weird setup.
103
PidFile=/var/run/gdm.pid
105
# Note that a post login script is run before a PreSession script. It is run
106
# after the login is successful and before any setup is run on behalf of the
108
PostLoginScriptDir=/etc/gdm/PostLogin/
109
PreSessionScriptDir=/etc/gdm/PreSession/
110
PostSessionScriptDir=/etc/gdm/PostSession/
111
DisplayInitDir=/etc/gdm/Init
112
# Distributions: If you have some script that runs an X server in say VGA
113
# mode, allowing a login, could you please send it to me?
115
# if X keeps crashing on us we run this script. The default one does a bunch
116
# of cool stuff to figure out what to tell the user and such and can run an X
117
# configuration program.
118
XKeepsCrashing=/etc/gdm/XKeepsCrashing
119
# Reboot, Halt and suspend commands, you can add different commands separated
120
# by a semicolon. GDM will use the first one it can find.
121
RebootCommand=/sbin/shutdown -r now "Rebooted from gdm menu."
122
HaltCommand=/sbin/shutdown -h now "Halted from gdm menu."
123
SuspendCommand=/usr/sbin/pmi action sleep
124
HibernateCommand=/usr/sbin/pmi action hibernate
125
# Probably should not touch the below this is the standard setup.
126
ServAuthDir=/var/lib/gdm
127
# This is our standard startup script. A bit different from a normal X
128
# session, but it shares a lot of stuff with that. See the provided default
129
# for more information.
130
BaseXsession=/etc/gdm/Xsession
131
# This is a directory where .desktop files describing the sessions live. It is
132
# really a PATH style variable since 2.4.4.2 to allow actual interoperability
133
# with KDM. Note that <sysconfdir>/dm/Sessions is there for backwards
134
# compatibility reasons with 2.4.4.x.
135
SessionDesktopDir=/etc/X11/sessions/:/etc/dm/Sessions/:/usr/share/gdm/BuiltInSessions/:/usr/share/xsessions/
136
# This is the default .desktop session. One of the ones in SessionDesktopDir
137
DefaultSession=xfce4.desktop
138
# Better leave this blank and HOME will be used. You can use syntax ~/ below
139
# to indicate home directory of the user. You can also set this to something
140
# like /tmp if you don't want the authorizations to be in home directories.
141
# This is useful if you have NFS mounted home directories. Note that if this
142
# is the home directory the UserAuthFBDir will still be used in case the home
143
# directory is NFS, see security/NeverPlaceCookiesOnNFS to override this
146
# Fallback directory for writing authorization file if user's home directory
149
UserAuthFile=.Xauthority
150
# The X server to use if we can't figure out what else to run.
151
StandardXServer=/usr/bin/X
152
# The maximum number of flexible X servers to run.
154
# And after how many minutes should we reap the flexible server if there is no
155
# activity and no one logged on. Set to 0 to turn off the reaping. Does not
156
# affect Xnest flexiservers.
157
#FlexiReapDelayMinutes=5
158
# The X nest command.
159
Xnest=/usr/bin/Xnest -br -br -audit 0 -name Xnest
160
# Automatic VT allocation. Right now only works on Linux. This way we force
161
# X to use specific vts. turn VTAllocation to false if this is causing
165
# Should double login be treated with a warning (and possibility to change VT's
166
# on Linux and FreeBSD systems for console logins)
167
#DoubleLoginWarning=true
168
# Should a second login always resume the current session and switch VT's on
169
# Linux and FreeBSD systems for console logins
170
#AlwaysLoginCurrentSession=true
172
# If true then the last login information is printed to the user before being
173
# prompted for password. While this gives away some info on what users are on
174
# a system, it on the other hand should give the user an idea of when they
175
# logged in and if it doesn't seem kosher to them, they can just abort the
176
# login and contact the sysadmin (avoids running malicious startup scripts).
177
#DisplayLastLogin=false
179
# Program used to play sounds. Should not require any 'daemon' or anything
180
# like that as it will be run when no one is logged in yet.
181
SoundProgram=/usr/lib/gdmplay
183
# These are the languages that the console cannot handle because of font
184
# issues. Here we mean the text console, not X. This is only used when there
185
# are errors to report and we cannot start X.
186
# This is the default:
187
#ConsoleCannotHandle=am,ar,az,bn,el,fa,gu,hi,ja,ko,ml,mr,pa,ta,zh
189
# This determines whether GDM will honor requests DYNAMIC requests from the
190
# gdmdynamic command.
191
#DynamicXServers=false
193
# This determines whether GDM will send notifications to the console.
197
# Allow root to login. It makes sense to turn this off for kiosk use, when
198
# you want to minimize the possibility of break in.
200
# Allow login as root via XDMCP. This value will be overridden and set to
201
# false if the /etc/default/login file exists and contains
202
# "CONSOLE=/dev/login", and set to true if the /etc/default/login file exists
203
# and contains any other value or no value for CONSOLE.
204
AllowRemoteRoot=false
205
# This will allow remote timed login.
206
AllowRemoteAutoLogin=false
207
# 0 is the most restrictive, 1 allows group write permissions, 2 allows all
210
# Check if directories are owned by logon user. Set to false, if you have, for
211
# example, home directories owned by some other user.
213
# Number of seconds to wait after a bad login
215
# Maximum size of a file we wish to read. This makes it hard for a user to DoS
216
# us by using a large file.
218
# If true this will basically append -nolisten tcp to every X command line, a
219
# good default to have (why is this a "negative" setting? because if it is
220
# false, you could still not allow it by setting command line of any particular
221
# server). It's probably better to ship with this on since most users will not
222
# need this and it's more of a security risk then anything else.
223
# Note: Anytime we find a -query or -indirect on the command line we do not add
224
# a "-nolisten tcp", as then the query just wouldn't work, so this setting only
225
# affects truly local sessions.
227
# By default never place cookies if we "detect" NFS. We detect NFS by
228
# detecting "root-squashing". It seems bad practice to place cookies on things
229
# that go over the network by default and thus we do not do it by default.
230
# Sometimes you can however use safe remote filesystems where this is OK and
231
# you may want to have the cookie in your home directory.
232
#NeverPlaceCookiesOnNFS=true
233
# Will cause PAM_DISALLOW_NULL_AUTHTOK to be passed as a flag to
234
# pam_authenticate and pam_acct_mgmt, disallowing NULL password. This setting
235
# will only take effect if PAM is being used by GDM. This value will be
236
# overridden with the value from /etc/default/login if it contains
238
#PasswordRequired=false
240
# XDMCP is the protocol that allows remote login. If you want to log into GDM
241
# remotely (I'd never turn this on on open network, use ssh for such remote
242
# usage that). You can then run X with -query <thishost> to log in, or
243
# -indirect <thishost> to run a chooser. Look for the 'Terminal' server type
244
# at the bottom of this config file.
246
# Distributions: Ship with this off. It is never a safe thing to leave out on
247
# the net. Setting up /etc/hosts.allow and /etc/hosts.deny to only allow local
248
# access is another alternative but not the safest. Firewalling port 177 is
249
# the safest if you wish to have xdmcp on. Read the manual for more notes on
250
# the security of XDMCP.
252
# Honor indirect queries, we run a chooser for these, and then redirect the
253
# user to the chosen host. Otherwise we just log the user in locally.
255
# Maximum pending requests.
257
#MaxPendingIndirect=4
258
# Maximum open XDMCP sessions at any point in time.
260
# Maximum wait times.
263
# How many times can a person log in from a single host. Usually better to
264
# keep low to fend off DoS attacks by running many logins from a single host.
265
# This is now set at 2 since if the server crashes then GDM doesn't know for
266
# some time and wouldn't allow another session.
268
# The number of seconds after which a non-responsive session is logged off.
269
# Better keep this low.
270
#PingIntervalSeconds=15
271
# The port. 177 is the standard port so better keep it that way.
273
# Willing script, none is shipped and by default we'll send hostname system id.
274
# But if you supply something here, the output of this script will be sent as
275
# status of this host so that the chooser can display it. You could for
276
# example send load, or mail details for some user, or some such.
277
#Willing=/etc/gdm/Xwilling
280
# The specific gtkrc file we use. It should be the full path to the gtkrc that
281
# we need. Unless you need a specific gtkrc that doesn't correspond to a
282
# specific theme, then just use the GtkTheme key.
283
#GtkRC=/usr/share/themes/Default/gtk-2.0/gtkrc
285
# The GTK+ theme to use for the GUI.
287
# If to allow changing the GTK+ (widget) theme from the greeter. Currently
288
# this only affects the standard greeter as the graphical greeter does not yet
290
AllowGtkThemeChange=true
291
# Comma separated list of themes to allow. These must be the names of the
292
# themes installed in the standard locations for gtk themes. You can also
293
# specify 'all' to allow all installed themes. These should be just the
294
# basenames of the themes such as 'Thinice' or 'LowContrast'.
295
GtkThemesToAllow=Human,HighContrast,HighContrastInverse,LowContrast
297
# Maximum size of an icon, larger icons are scaled down.
302
# The following options for setting titlebar and setting window position are
303
# only useful for the standard login (gdmlogin) and are not used by the
304
# themed login (gdmgreeter).
306
# The standard login has a title bar that the user can move.
308
# Don't allow user to move the standard login window. Only makes sense if
311
# Set a position for the standard login window rather then just centering the
312
# window. If you enter negative values for the position it is taken as an
313
# offset from the right or bottom edge.
318
# Enable the Face browser. Note that the Browser key is only used by the
319
# standard login (gdmlogin) program. The Face Browser is enabled in
320
# the Graphical greeter by selecting a theme that includes the Face
321
# Browser, such as happygnome-list. The other configuration values that
322
# affect the Face Browser (MinimalUID, DefaultFace, Include, Exclude,
323
# IncludeAll, GlobalFaceDir) are used by both the Standard and Themed
326
# The default picture in the browser.
327
#DefaultFace=/usr/share/pixmaps/nobody.png
328
# User ID's less than the MinimalUID value will not be included in the face
329
# browser or in the gdmselection list for Automatic/Timed login. They will not
330
# be displayed regardless of the settings for Include and Exclude.
332
# Users listed in Include will be included in the face browser and in the
333
# gdmsetup selection list for Automatic/Timed login. Users should be separated
336
# Users listed in Exclude are excluded from the face browser and from the
337
# gdmsetup selection list for Automatic/Timed login. Excluded users will still
338
# be able to log in, but will have to type their username. Users should be
339
# separated by commas.
340
Exclude=bin,daemon,adm,lp,sync,shutdown,halt,mail,news,uucp,operator,nobody,gdm,postgres,pvm,rpm
341
# By default, an empty include list means display no users. By setting
342
# IncludeAll to true, the password file will be scanned and all users will be
343
# displayed except users excluded via the Exclude setting and user ID's less
344
# than MinimalUID. Scanning the password file can be slow on systems with
345
# large numbers of users and this feature should not be used in such
346
# environments. The setting of IncludeAll does nothing if Include is set to a
349
# If user or user.png exists in this dir it will be used as his picture.
350
#GlobalFaceDir=/usr/share/pixmaps/faces/
352
# File which contains the locale we show to the user. Likely you want to use
353
# the one shipped with GDM and edit it. It is not a standard locale.alias
354
# file, although GDM will be able to read a standard locale.alias file as well.
355
LocaleFile=/etc/gdm/locale.conf
356
# Logo shown in the standard greeter.
357
#Logo=/usr/share/pixmaps/gdm-foot-logo.png
358
# Logo shown on file chooser button in gdmsetup (do not modify this value).
359
#ChooserButtonLogo=/usr/share/pixmaps/gdm-foot-logo.png
360
# The standard greeter should shake if a user entered the wrong username or
361
# password. Kind of cool looking
364
# The Actions menu (formerly system menu) is shown in the greeter, this is the
365
# menu that contains reboot, shutdown, suspend, config and chooser. None of
366
# these is available if this is off. They can be turned off individually
369
# Configuration is available from the system menu of the greeter.
370
#ConfigAvailable=false
371
# Should the chooser button be shown. If this is shown, GDM can drop into
372
# chooser mode which will run the xdmcp chooser locally and allow the user to
373
# connect to some remote host. Local XDMCP does not need to be enabled,
377
# Welcome is for all console logins and RemoteWelcome is for remote logins
379
# DefaultWelcome and DefaultRemoteWelcome set the string for Welcome to
380
# "Welcome" and for DefaultWelcome to "Welcome to %n", and properly translate
381
# the message to the appropriate language. Note that %n gets translated to the
382
# hostname of the machine. These default values can be overridden by setting
383
# DefaultWelcome and/or DefaultRemoteWelcome to false, and setting the Welcome
384
# and DefaultWelcome values as desired. Just make sure the strings are in
385
# utf-8 Note to distributors, if you wish to have a different Welcome string
386
# and wish to have this translated you can have entries such as
387
# "Welcome[cs]=Vitejte na %n".
389
DefaultRemoteWelcome=true
391
#RemoteWelcome=Welcome to %n
393
# Xinerama screen we use to display the greeter on. Not for true multihead,
394
# currently only works for Xinerama.
396
# Background settings for the standard greeter:
397
# Type can be 0=None, 1=Image & Color, 2=Color, 3=Image
400
#BackgroundScaleToFit=true
401
# The Standard greeter (gdmlogin) uses BackgroundColor as the background
402
# color, while the themed greeter (gdmgreeter) uses GraphicalThemedColor
403
# as the background color.
404
BackgroundColor=#85abd1
405
GraphicalThemedColor=#85abd1
406
# XDMCP session should only get a color, this is the sanest setting since you
407
# don't want to take up too much bandwidth
408
#BackgroundRemoteOnlyColor=true
410
# Program to run to draw the background in the standard greeter. Perhaps
411
# something like an xscreensaver hack or some such.
413
# if this is true then the background program is run always, otherwise it is
414
# only run when the BackgroundType is 0 (None).
415
#RunBackgroundProgramAlways=false
417
# Show the Failsafe sessions. These are much MUCH nicer (focus for xterm for
418
# example) and more failsafe then those supplied by scripts so distros should
419
# use this rather then just running an xterm from a script.
420
#ShowGnomeFailsafeSession=true
421
#ShowXtermFailsafeSession=true
422
# Normally there is a session type called 'Last' that is shown which refers to
423
# the last session the user used. If off, we will be in 'switchdesk' mode
424
# where the session saving stuff is disabled in GDM
425
#ShowLastSession=true
426
# Always use 24 hour clock no matter what the locale.
428
# Use circles in the password field. Looks kind of cool actually, but only
429
# works with certain fonts.
430
UseCirclesInEntry=true
431
# Do not show any visible feedback in the password field. This is standard for
432
# instance in console, xdm and ssh.
433
#UseInvisibleInEntry=false
435
# These two keys are for the themed greeter (gdmgreeter). Circles is the
436
# standard shipped theme. If you want GDM to select a random theme from a
437
# list then provide a list that is delimited by /: to the GraphicalThemes
438
# key and set GraphicalThemeRand to true. Otherwise use GraphicalTheme
439
# and specify just one theme.
440
GraphicalTheme=xubuntu
441
#GraphicalThemes=circles/:happygnome
442
GraphicalThemeDir=/usr/share/gdm/themes/
443
GraphicalThemeRand=false
445
# If InfoMsgFile points to a file, the greeter will display the contents of the
446
# file in a modal dialog box before the user is allowed to log in.
448
# If InfoMsgFile is present then InfoMsgFont can be used to specify the font to
449
# be used when displaying the contents of the file.
452
# If SoundOnLogin is true, then the greeter will beep when login is ready for
453
# user input. If SoundOnLogin is a file and the greeter finds the 'play'
454
# executable (see daemon/SoundProgram) it will play that file instead of just
457
SoundOnLoginFile=/usr/share/sounds/question.wav
458
# If SoundOnLoginSuccess, then the greeter will play a sound (as above) when a
459
# user successfully logs in.
460
#SoundOnLoginSuccess=false
461
#SoundOnLoginSuccessFile=
462
# If SoundOnLoginFailure, then the greeter will play a sound (as above) when a
463
# user fails to log in.
464
#SoundOnLoginFailure=false
465
#SoundOnLoginFailureFile=
467
# Specifies a program to be called by the greeter/login program when the
468
# initial screen is displayed. The purpose is to provide a hook where files
469
# used after login can be preloaded to speed performance for the user. The
470
# program will only be called once only, the first time a greeter is displayed.
471
# The gdmprefetch command may be used. This utility will load any libraries
472
# passed in on the command line, or if the argument starts with a "@"
473
# character, it will process the file assuming it is an ASCII file containing a
474
# list of libraries, one per line, and load each library in the file.
475
PreFetchProgram=/usr/lib/gdmprefetch @/etc/gdm/gdmprefetchlist
477
# The chooser is what's displayed when a user wants an indirect XDMCP session,
478
# or selects Run XDMCP chooser from the system menu
480
# Default image for hosts.
481
#DefaultHostImg=/usr/share/pixmaps/nohost.png
482
# Directory with host images, they are named by the hosts: host or host.png.
483
HostImageDir=/usr/share/hosts/
484
# Time we scan for hosts (well only the time we tell the user we are scanning
485
# actually, we continue to listen even after this has expired).
487
# A comma separated lists of hosts to automatically add (if they answer to a
488
# query of course). You can use this to reach hosts that broadcast cannot
491
# Broadcast a query to get all hosts on the current network that answer.
493
# Set it to true if you want to send a multicast query to hosts.
495
# It is an IPv6 multicast address.It is hardcoded here and will be replaced
496
# when officially registered xdmcp multicast address of TBD will be available.
497
#Multicast_Addr=ff02::1
498
# Allow adding random hosts to the list by typing in their names.
502
# This will cause GDM to send debugging information to the system log, which
503
# will create a LOT of output. It is not recommended to turn this on for
504
# normal use, but it can be useful to determine the cause when GDM is not
507
# This will enable debug messages for accessibilty gesture listeners into the
508
# syslog. This includes output about key events, mouse button events, and
509
# pointer motion events. This is useful for figuring out the cause of why the
510
# gesture listeners may not be working, but is too verbose for general debug.
514
# These are the standard servers. You can add as many you want here and they
515
# will always be started. Each line must start with a unique number and that
516
# will be the display number of that server. Usually just the 0 server is
520
# Note the VTAllocation and FirstVT keys on Linux and FreeBSD. Don't add any
521
# vt<number> arguments if VTAllocation is on, and set FirstVT to be the first
522
# vt available that your gettys don't grab (gettys are usually dumb and grab
523
# even a vt that has already been taken). Using 7 will work pretty much for
524
# all Linux distributions. VTAllocation is not currently implemented on
525
# anything but Linux and FreeBSD. Feel free to send patches. X servers will
526
# just not get any extra arguments then.
528
# If you want to run an X terminal you could add an X server such as this:
529
#0=Terminal -query serverhostname
530
# or for a chooser (optionally serverhostname could be localhost):
531
#0=Terminal -indirect serverhostname
533
# If you wish to run the XDMCP chooser on the local display use the following
538
# is your X server not listening to TCP requests? Perhaps you should look at
539
# the security/DisallowTCP setting!
541
# Definition of the standard X server.
544
command=/usr/bin/X -br -audit 0
546
# Indicates that the X server should be started at a different process
547
# priority. Values can be any integer value accepted by the setpriority C
548
# library function (normally between -20 and 20) with 0 being the default. For
549
# highly interactive applications, -5 yields good responsiveness. The default
550
# value is 0 and the setpriority function is not called if the value is 0.
554
# To use this server type you should add -query host or -indirect host to the
558
# Add -terminate to make things behave more nicely
559
command=/usr/bin/X -br -audit 0 -terminate
560
# Make this not appear in the flexible servers (we need extra params anyway,
561
# and terminate would be bad for xdmcp choosing). You can make a terminal
562
# server flexible, but not with an indirect query. If you need flexible
563
# indirect query server, then you must get rid of the -terminate and the only
564
# way to kill the flexible server will then be by Ctrl-Alt-Backspace.
566
# Not local, we do not handle the logins for this X server.
569
# To use this server type you should add -query host or -indirect host to the
573
command=/usr/bin/X -br -audit 0
574
# Make this not appear in the flexible servers for now, but if you wish to
575
# allow a chooser server then make this true. This is the only way to make a
576
# flexible chooser server that behaves nicely.
578
# Run the chooser instead of the greeter. When the user chooses a machine they
579
# will get this same server but run with "-terminate -query hostname".