On, Monday 03 July 2006 23:15 Randy McMurchy wrote: > You should not be using login.defs to handle > login retries. It should be configured through PAM. Specifically, > it should be configured via the pam_tally module.
I looked through pam_tally (and other PAM modules) documentation and found nothing concerning how to set the retries number. pam_tally allows to set up the number of _successfull logins_ after which a user won't be able to log in until a system administrator runs pam_tally --some-option. Everything I found recommends to run the pam_tally command from crontab (some documents recommend doing so every 5 minutes!) that doesn't seem reasonable. The problem isn't in setting the limit of successful logins but in setting the limit of login retries while trying wrong passwords. Maybe it's only me who has the problem described :( ? -- Nothing but perfection pv -- http://linuxfromscratch.org/mailman/listinfo/blfs-support FAQ: http://www.linuxfromscratch.org/blfs/faq.html Unsubscribe: See the above information page
