jpeg

Hello,

I'm on Fedora core 8 and I recently finished configuring pam to deny access after a certain number of failed login attempts.

My pam configuration works just fine (suprisingly), but when it locks the account you don't get any message that this has occured. When you try to enter the password again you get the authorization failure, but the user is never informed that the account has been locked.

Does anyone have any ideas on how to address this? I'd appreciate the help.

vickey_20

can you post the configuration file you have tweaked , so that we get a fair idea . form where actaully the user is being disabled and what options are available to infrom the user about account expiration.

__________________
Only if I could understand the man pages
Registered Linux user #492640
OS: RHEL4,5 ,RH 9,Ubuntu

jpeg

vickey_20,

Thanks for the response.

All I did was change the system-auth symlink from the /etc/pam.d/system-auth-ac file to a local config file (It had the same rules in it as the system-auth-ac). Then I added the blocking rule:

So the blocking is being done by the pam_tally module.

vickey_20

sorry friend but I don't know much about this module but anyway here's a good link that will surely help you 6.32.pam_tally - login counter (tallying) module

__________________
Only if I could understand the man pages
Registered Linux user #492640
OS: RHEL4,5 ,RH 9,Ubuntu