Please advice on this regards.

How to restrict user's login attempt.

That means user will not be prompted to the login seesion, after entered 3 times wrong paasword.

Thanks in Advance !

Hey all I got the answer. Correct me if i am worng.

We need to edit the file "limits.conf" under /etc/security/.

@user - maxlogins 3

TY

Do you want to limit “attempts” to login into the system, or the “number of logins” per user at a time? The former is usually set up in the firewall, while the latter is in “limits.conf”.

Yes. I want to limit “number of logins” per user.

Ok. Please let me know how to limit “attempts” to login into the system

First-of-all you please provide complete information, like which OS you are using?

Depending on the distribution,
In my case:
go to --- /etc/pam.d/system-auth
append auth required pam_tally.so onerr=fail deny=5 unlock_time=21600

Where,
(a) deny=5 - Deny access if tally for this user exceeds 5 times.

(b) unlock_time=21600 - Allow access after 21600 seconds(6 hours) after failed attempt. If this option is used the user will be locked out for the specified amount of time after he exceeded his maximum allowed attempts. Otherwise the account is locked until the lock is removed by a manual intervention of the system administrator.

(c) onerr=fail - If something weird happens(like unable to open the file), return with PAM_SUCESS if onerr=succeed is given, else with the corresponding PAM error code.

Try in your OS and let us know.

1 members found this post helpful.

In SunSolaris the file is /etc/default/login.

The line is RETRIES=5(or whatever number is set on your server).
See the man page for login.

1 members found this post helpful.

Thanks Satyaveer !

I am using Redhat EL-4. So the correct file is "/etc/pam.d/system-auth".

Lemme to work on this and come back to u ?

Cherrs!
Abhay

So, there is a line in /etc/pam.d/system-auth :

change the number according to your need.

1 members found this post helpful.

Just a note. Anyone using Fedora 16 and want to attempt the same thing. Modify the line to use pam_tally2.so
"auth required pam_tally2.so onerr=fail deny=5 unlock_time=21600"

To show login attempts use:
pam_tally2 --user admin

To reset locked account use:
pam_tally2 --user admin --reset

1 members found this post helpful.

Thanks guys for your great help. Will meet in another issue

abhay1983,

Have you solved your problem? If so, how? Please tell us all.