Can I permanently lock a user account with pam_tally ?
 

Hi,

I try to lock out an user account permanently with pam_tally if the predefined max. unsuccessful login attemp reached, I understand 'unlock_time' can take seconds as input but I don't know what's the max value I can use and also is wondering can I use something like -1 to indicate lock out forever ?

p.s. I understand there are other commands such as 'passwd -l user_id' can do the job but I just want to know if pam_tally can to it.

Thanks,
David

See http://kbase.redhat.com/faq/FAQ_44_4047.shtm

I guess I was asking a very stupid question ... just remove the 'unlock_time' option from pam_tally will lock out user permanently :)

Thanks
David