Password lock out after 'x' number of unsuccessful login attempts. 1

[gt6350a]

Is it possible to configure Linux to lock a user out for a certain period of time if they enter the wrong password? I would like to have password lock out after 'x' number of unsuccessful login attempts for 'y' period of time.

Thanks in advance for your time and effort to this post.

 

[Morsing]

I think the login.conf file is a good place to start.

Cheers Henrik Morsing
Certified AIX 4.3 Systems Administration
& p690 Technical Support

 

[Morsing]

Sorry, that would be login.defs

Cheers Henrik Morsing
Certified AIX 4.3 Systems Administration
& p690 Technical Support

 

[ugenn]

How do you do this in PAM?

 

[Morsing]

What does it have to do with PAM?? Sorry, I've never understood PAM!!

Cheers Henrik Morsing
Certified AIX 4.3 Systems Administration
& p690 Technical Support

 

[gt6350a]

Thank you Henrik. I checked out the configuration information on login.conf it appears as if there is not a field for 'account lock out'. Am I mistaken? From my research, there appears to be some other very useful fields but 'account lock out' is not one of them.

Thank again! More suggestions/comments? Does anyone else have any suggestions?

 

[Morsing]

It should all be there. Do you have the login.defs man page??

Cheers Henrik Morsing
Certified AIX 4.3 Systems Administration
& p690 Technical Support

 

[ugenn]

I mean how do u achieve the same effect
if the shadow suite was compiled with PAM
support?

 

[gt6350a]

Hello Henrik:

I took a good look at the man page for login.defs adn it too is great BUT I can not find anywhere onthe entire page a place/field that allows the computer to lock out temporarily when 'x' number of bad login attempts are made.

Am I doing something wrong? What is the name of the filed in the man pages I should configure? Please advise.

 

[Norwich]

Hi - check out "pam_tally"

 

[Morsing]

Well, I don't think you can lock for a day or so if that's what you want.

Maybe you could set up a cron job to run at midnight to unlock the accounts??

Cheers Henrik Morsing
Certified AIX 4.3 Systems Administration
& p690 Technical Support