"Account Locked" message after pam_tally lock

[geelsu]

I'm using pam_tally in system-auth to lock accounts after X amount of attempts. However, after the account locks the users don't know this because the standard error is only displayed i.e. "Incorrect User Name or Password."

Does anyone know of a way to present a "Your Account Is Locked." message to the user? Is there a PAM way to display such a message. I thought about the PreSession in gdm, but I suppose you never actually get to that point since you aren't being authenticated to login.

I'm using the "Plain" style available from gdmsetup as my display at login.

I'm also using Red Hat 5.3.

Thanks all.

[Rubberman]

I suspect that the message you see is the generic one caused when user authentication fails for whatever reason. I don't know how this can be changed or even if it can be. It depends upon what the return code is for the login attempt and if the program code that displays the error message can determine if the account is locked or not from that information.