LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 09-03-2008, 09:25 AM   #1
dmak168
LQ Newbie
 
Registered: Aug 2008
Posts: 7

Rep: Reputation: 0
Can I permanently lock a user account with pam_tally ?


Hi,

I try to lock out an user account permanently with pam_tally if the predefined max. unsuccessful login attemp reached, I understand 'unlock_time' can take seconds as input but I don't know what's the max value I can use and also is wondering can I use something like -1 to indicate lock out forever ?

p.s. I understand there are other commands such as 'passwd -l user_id' can do the job but I just want to know if pam_tally can to it.

Thanks,
David
 
Old 09-04-2008, 12:54 AM   #2
brianmcgee
Member
 
Registered: Jun 2007
Location: Munich, Germany
Distribution: RHEL, CentOS, Fedora, SLES (...)
Posts: 399

Rep: Reputation: 40
See http://kbase.redhat.com/faq/FAQ_44_4047.shtm
 
Old 09-04-2008, 02:40 PM   #3
dmak168
LQ Newbie
 
Registered: Aug 2008
Posts: 7

Original Poster
Rep: Reputation: 0
I guess I was asking a very stupid question ... just remove the 'unlock_time' option from pam_tally will lock out user permanently

Thanks
David
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Enable Account lock out in RH 9 lgpage Linux - Security 2 01-09-2007 12:47 PM
Prevent user account from logging in but allow su to account DejaCpp Linux - General 4 07-26-2006 11:44 AM
is it legitimate and allowed and can be done to make another user account set uid and gid to null 0 to make another root account with different name and possibly not damage the debian system creating and using that new account BenJoBoy Linux - Newbie 12 01-29-2006 10:02 AM
Temporarily lock an account looseCannon AIX 5 02-04-2005 11:24 AM
Lock account after successive login attempts herrmag Linux - Newbie 1 02-03-2005 06:10 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 07:56 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration