Can't lock a user in Red Hat after failed logins
Hi, I'm trying to lock a userid in Red Hat ES v3 (update 4) after 5 failed login attempts. I have created aetc-pam.d-system-auth as per an article in Red Hat's knowledgebase, but instead of locking after 5 bad logins, I get chucked off the system after 4 bad attempts and then can log straight back in with the correct pbuttword OK. My system-auth looks like:
#%PAM-1.0 # This file is auto-generated. # User changes will be destroyed the next time authconfig is run. auth required lib-security-$ISA-pamenv.so auth sufficient lib-security-$ISA-pamunix.so likeauth nullok auth required lib-security-$ISA-pamdeny.so auth required lib-security-$ISA-pamtally.so onerr=fail nomagicroot
I downloaded a file with .rar extension using lynx: and discovered that my RedHat 7 Linux system didn't have any way to read it. I eventually found and downloaded rar-2.80 and installed...
account required lib-security-$ISA-pamunix.so remember=10 100 quiet account required lib-security-$ISA-pampermit.so account required lib-security-$ISA-pamtally.so deny=5 nomagicroot reset
pbuttword requisite lib-security-$ISA-pamcracklib.so retry=5 minlen=8 lcredit=-1 ucredit=0 dcredit=-1 ocredit=0 difok =3 pbuttword sufficient lib-security-$ISA-pamunix.so nullok useauthtok md5 shadow pbuttword required lib-security-$ISA-pamdeny.so
session required lib-security-$ISA-pamlimits.so session required lib-security-$ISA-pamunix.so
Many thanks.
Linux groups from Newsgroups