Login or Register to Ask a Question and Join Our Community

Sponsored Content
Full Discussion: Difficulties with pam_tally2! :-(
Operating Systems Linux Red Hat Difficulties with pam_tally2! :-( Post 302595582 by gz3xzf on Friday 3rd of February 2012 12:56:33 PM
Old 02-03-2012
Difficulties with pam_tally2! :-(
Dear All

I have having some trouble with pam_tally2 on RHEL 6.0 which I am getting quite frustrated with and I am sure it is a simple problem.

I have the following lines in system-auth and password-auth: -
Code:
auth        required      pam_tally2.so        onerr=fail file=/var/log/faillog deny=6 unlock_time=600 magic_root
 
account     required      pam_tally2.so

I have positioned them as the second entries in their respective sections. (NOTE the magic_root parameter was added after some problems with sudo)

With these lines in place the system will allow you to login, but if you then logout it will not let you login again for another 10 minutes (i.e. the unlock time). I have looked at the output for the following two commands and they show as displayed: -
Code:
[root@hpxor580 pam.d]# faillog -u abcd1234;echo;pam_tally2 -u abcd1234
Login       Failures Maximum Latest                   On
abcd1234        0     3600   01/01/70 01:00:00 +0100  00.2.37
Login           Failures Latest failure     From
abcd1234            0
[root@hpxor580 pam.d]#

I have tried unlocking the account and setting the Max at a large number (see above) with no change, the only way to stop the problem is to remove pam_tally2 lines from the two files, but then there is no lockout after so many failed passwords.
The log shows a steadily increasing number for the failed logins: -
Code:
Feb  3 18:24:03 localhost sshd[34148]: pam_tally2(sshd:auth): user abcd1234 (400) tally 82, deny 6

Hopefully someone has had a similar problem with this and has a solution.

Regards,
Bryan
Bryan V Hardwick
 

7 More Discussions You Might Find Interesting

1. Programming

Simple Network Program Difficulties

I'm trying to write 2 programs, client & server, that communicate with integers, however, all resources I have found on the net assume that you want to send and recieve information as a character array. I don't want to send my integers as characters, I want to send them as ints (casting them to... (2 Replies)
Discussion started by: Mistwolf
2 Replies

2. IP Networking

Proxy ARP Difficulties

edited ... (7 Replies)
Discussion started by: TheMaskedMan
7 Replies

3. Shell Programming and Scripting

trying to cope with awk difficulties

The data we are searching is populated in this way: ----IP---------DAY----MONTH----DATE--------TIME---------YEAR 12.3234.34-----Fri------Nov-------15-------18:05:14 GMT---2008 I want the user to be able to search for the data according to month and year. However, I cannot quite figure out... (8 Replies)
Discussion started by: amatuer_lee_3
8 Replies

4. UNIX for Dummies Questions & Answers

Sorting Difficulties

Hey guys, I am sort of new to unix and I am having difficulty sorting. What I am trying to do is sort a particular field in reversed order and another field in alphabetic order to create a new file that looks like this: MILLER,EDWARD AL 14 101293 9341 MOORE,HENRY 15 ... (6 Replies)
Discussion started by: nthamma
6 Replies

5. Filesystems, Disks and Memory

iSCSI client setup difficulties

I am trying to set up iscsi linux clients and am having some problems. iscsid is running, I can do discovery fine, but adding the iscsi lun I get the following error: iscsiadm -m node -T iqn.xxxxxxxxxxxxxx -p y.y.y.y:3260 -l Logging in to iscsid: session already running. iscsiadm: Could not... (0 Replies)
Discussion started by: humbletech99
0 Replies

6. UNIX for Dummies Questions & Answers

Facing difficulties to untar a tra.gz file

Hi , I trying to cp a files to one location and trying to untar there,the tar.gz files get copied to the specified location but wont untar. Here is what i did if cp /path/of/the/file.tar.gz /path/to/the/file/file.tar.gz then tar -zxvf /path/to/the/file/file.tar.gz echo "FILE... (2 Replies)
Discussion started by: vikatakavi
2 Replies

7. Shell Programming and Scripting

Difficulties in matching left bracket as literal in awk

I need to work with records having #AX in the EXP1 , please see my data sample and my attempt below: $ cat xx 08:30:33 KEY1 (1255) EXP1 VAL:20AX0030006 08:30:33 KEY1 (1255) EXP1 VAL:20AX0030006 08:30:33 KEY1 (1255) EXP1 VAL:20AW0030006 08:30:33 KEY1 (1255) EXP1 VAL:20AW0030006 $ gawk '{... (1 Reply)
Discussion started by: migurus
1 Replies

LEARN ABOUT CENTOS

system-auth

SYSTEM-AUTH(5)							 Linux-PAM Manual						    SYSTEM-AUTH(5)

NAME

       system-auth - Common configuration file for PAMified services

SYNOPSIS

       /etc/pam.d/system-auth /etc/pam.d/password-auth /etc/pam.d/fingerprint-auth /etc/pam.d/smartcard-auth

DESCRIPTION

       The  purpose  of  these configuration files are to provide a common interface for all applications and service daemons calling into the PAM
       library.

       The system-auth configuration file is included from nearly all individual service configuration files with the help of the substack  direc-
       tive.

       The password-auth fingerprint-auth smartcard-auth configuration files are for applications which handle authentication from different types
       of devices via simultaneously running individual conversations instead of one aggregate conversation.

NOTES

       Previously these common configuration files were included with the help of the include directive. This limited the  use	of  the  different
       action types of modules.  With the use of substack directive to include these common configuration files this limitation no longer applies.

BUGS

       None known.

SEE ALSO

       pam(8), config-util(5), postlogin(5)

       The three Linux-PAM Guides, for system administrators, module developers, and application developers.

Red Hat 							    2010 Dec 22 						    SYSTEM-AUTH(5)
All times are GMT -4. The time now is 12:36 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy