login-script

thermite_1033 · 09-28-2004, 02:51 AM

in /etc/login.defs you can set the amount of times somebody can try with a wrong password ( 5 times is default) and then the user haves to wait 60sec to try login again.

Quote:

#
# Max number of login retries if password is bad
#
LOGIN_RETRIES 5

#
# Max time in seconds for login
#
LOGIN_TIMEOUT 60

my question is instead of waiting 60sec can you run a script if the user 5 times retries??

i want then an email send to me and then shutsdown or reboots

mayby some overkill security

wants to secure a server

320mb · 09-28-2004, 04:56 AM

Code:

 #
# Max number of login retries if password is bad
#
LOGIN_RETRIES 2

#
# Max time in seconds for login
#
LOGIN_TIMEOUT 3600

well change the defaults like so:
one would only get 2 tries and would have to wait an hour in between tries......if it is a legitimate user and they forgot pass they can email you, with their problem........and you don't really need it to reboot.........A good Admin will write their own $BASH script ..............So you really should learn BASH ..........

unSpawn · 09-28-2004, 04:54 PM

I'd rather use a lockout after x retries, like with PAM_tally, use the reporting tool and let it mail you when a user reaches the threshold.