Re: [CentOS] CentOS 5 - locking out users afer 3 failed attempts

2010-04-21 Thread John Doe
From: Tom Brown > auth required pam_tally.so deny=3 unlock_time=600 Anything in /var/log/tallylog Tried pam_tally2.so just in case? JD ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 5 - locking out users afer 3 failed attempts

2010-04-20 Thread Tom Brown
> Does '/var/log/faillog' exist and is it properly writable? > Is SELinux in play, etc?  The man page does not speak in terms > of edits to: /etc/pam.d/system-auth but rather to: > /etc/pam.d/login [note -- I suspect there may be a man page > bug here ... in testing; changes to /etc/pam.d/login and

Re: [CentOS] CentOS 5 - locking out users afer 3 failed attempts

2010-04-20 Thread Ray Van Dolson
On Tue, Apr 20, 2010 at 08:26:18PM +0100, Tom Brown wrote: > Hi > > I am trying to lock users after 3 attempts and then set the timeout > before they can log in again. > I thought i could achieve this with > > auth required pam_tally.so deny=3 unlock_time=600 > > in /etc/pam.d/system-auth but it