Hi,

i configured tmux as follows (/etc/tmux.conf on RHEL 7.7)

set -g lock-command vlock
set -g lock-after-time 900

After 900s my session is being locked and i can reauthenticate without 
problems as long as my SSH session is active. BUT when i close my 
ssh-session (via TMOUT or just by closing Putty) my user account is getting 
locked (via pam_faillock).

Feb 19 13:50:11 host1 vlock[31209]: Locked tty on pts/0 for user1 by 
(uid=5100)
Feb 19 13:50:50 host1 sshd[10687]: pam_unix(sshd:session): session closed 
for user user1 ## <--- i manually killed the SSH Session
Feb 19 13:50:50 host1 vlock[31209]: pam_unix(vlock:auth): conversation 
failed
Feb 19 13:50:50 host1 vlock[31209]: pam_unix(vlock:auth): auth could not 
identify password for [user1]
Feb 19 13:50:52 host1 vlock[31209]: pam_unix(vlock:auth): auth could not 
identify password for [user1]
Feb 19 13:50:54 host1 vlock[31209]: pam_unix(vlock:auth): auth could not 
identify password for [user1]
Feb 19 13:50:54 host1 vlock[31209]: pam_faillock(vlock:auth): Consecutive 
login failures for user user1 account temporarily locked


$ cat /etc/pam.d/vlock
#%PAM-1.0
auth       include      system-auth
account    required     pam_permit.so

$ cat /etc/pam.d/system-auth
auth required pam_faillock.so preauth silent audit deny=3 even_deny_root 
unlock_time=14400 fail_interval=900
auth include system-auth-ac
auth [default=die] pam_faillock.so authfail silent audit deny=3 
even_deny_root unlock_time=14400 fail_interval=900
account required pam_faillock.so
account include system-auth-ac
password include system-auth-ac
session include system-auth-ac


I'm not a pam expert but i hope someone can point me to the right 
direction!?

regards
sven

-- 
You received this message because you are subscribed to the Google Groups 
"tmux-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web, visit 
https://groups.google.com/d/msgid/tmux-users/594d149a-ad3d-43b7-a7f6-c6bc4b584813%40googlegroups.com.

Reply via email to