Lock and Unlock User Accounts Using PAM

anishkumarv · 10-16-2012, 01:43 AM

Dear Team,

This is my entry in /etc/pam.d/system-auth

Code:

auth     required     pam_tally2.so deny=3 onerr=fail unlock_time=900
account  required      pam_tally2.so

but this is not working as i expect even after 4 fail logins also the user account is not locking. do i need to restart any service? i this for pam no need to restart any service.

kindly guide me to solve this issue.

zQUEz · 10-16-2012, 05:39 AM

Where in your system_auth file do you have this line? Does it come after another auth line that might be stopping the check?
Are you getting any logging from pam_tally2? use command `pam_tally2` to report failed attempts or I believe /var/log/tally.log (or similiar).
What login mechanism are you testing this with? If sshd, is your sshd set to reference system-auth (/etc/pam.d/sshd)? Is your ssh set to use PAM at all (/etc/ssh/sshd_config)