limiting the login attempts
 

Hello,

Can you help me to limit the login attempts to 3 attempts only, then after the 3 failed attempts, the username will be locked up. And only the root will be able to activate the username again.

please include the procedures....

thanks.......:newbie:

Hmmmm ... how is root going to log in
when someone attempts to log in thrice
as root and fails? Or, why would it be
reasonable for root to have more than
3 login-attempts? ;)

I'd just recommend to set the following
values in
/etc/login.defs

FAIL_DELAY 8
LOGIN_RETRIES 3
PASS_MIN_LEN 12

:)

Which will prolong the time between
a failed login and the next prompt to 8
seconds, and if the login-attempt is remote,
close it down after three attempts and force
users to make more complex passwords...

Cheers,
Tink

you have a point there....thanks,,

anyway,,,im just playing around with my Red Hat...and trying out some things about security.....

I've already tried your suggesttion and seems that it doesnt work at all.......do you have any other ideas...

thanks....:Pengy: :Pengy: :Pengy: :Pengy: :Pengy: