Difficulties with pam_tally2! :-(

 
Thread Tools Search this Thread
Operating Systems Linux Red Hat Difficulties with pam_tally2! :-(
# 1  
Old 02-03-2012
Difficulties with pam_tally2! :-(

Dear All

I have having some trouble with pam_tally2 on RHEL 6.0 which I am getting quite frustrated with and I am sure it is a simple problem.

I have the following lines in system-auth and password-auth: -
Code:
auth        required      pam_tally2.so        onerr=fail file=/var/log/faillog deny=6 unlock_time=600 magic_root
 
account     required      pam_tally2.so

I have positioned them as the second entries in their respective sections. (NOTE the magic_root parameter was added after some problems with sudo)

With these lines in place the system will allow you to login, but if you then logout it will not let you login again for another 10 minutes (i.e. the unlock time). I have looked at the output for the following two commands and they show as displayed: -
Code:
[root@hpxor580 pam.d]# faillog -u abcd1234;echo;pam_tally2 -u abcd1234
Login       Failures Maximum Latest                   On
abcd1234        0     3600   01/01/70 01:00:00 +0100  00.2.37
Login           Failures Latest failure     From
abcd1234            0
[root@hpxor580 pam.d]#

I have tried unlocking the account and setting the Max at a large number (see above) with no change, the only way to stop the problem is to remove pam_tally2 lines from the two files, but then there is no lockout after so many failed passwords.
The log shows a steadily increasing number for the failed logins: -
Code:
Feb  3 18:24:03 localhost sshd[34148]: pam_tally2(sshd:auth): user abcd1234 (400) tally 82, deny 6

Hopefully someone has had a similar problem with this and has a solution.

Regards,
Bryan
Bryan V Hardwick
# 2  
Old 02-13-2012
Hasn't anybody had a problem with this?
Any help gladly received! Smilie
Login or Register to Ask a Question

Previous Thread | Next Thread

7 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Difficulties in matching left bracket as literal in awk

I need to work with records having #AX in the EXP1 , please see my data sample and my attempt below: $ cat xx 08:30:33 KEY1 (1255) EXP1 VAL:20AX0030006 08:30:33 KEY1 (1255) EXP1 VAL:20AX0030006 08:30:33 KEY1 (1255) EXP1 VAL:20AW0030006 08:30:33 KEY1 (1255) EXP1 VAL:20AW0030006 $ gawk '{... (1 Reply)
Discussion started by: migurus
1 Replies

2. UNIX for Dummies Questions & Answers

Facing difficulties to untar a tra.gz file

Hi , I trying to cp a files to one location and trying to untar there,the tar.gz files get copied to the specified location but wont untar. Here is what i did if cp /path/of/the/file.tar.gz /path/to/the/file/file.tar.gz then tar -zxvf /path/to/the/file/file.tar.gz echo "FILE... (2 Replies)
Discussion started by: vikatakavi
2 Replies

3. Filesystems, Disks and Memory

iSCSI client setup difficulties

I am trying to set up iscsi linux clients and am having some problems. iscsid is running, I can do discovery fine, but adding the iscsi lun I get the following error: iscsiadm -m node -T iqn.xxxxxxxxxxxxxx -p y.y.y.y:3260 -l Logging in to iscsid: session already running. iscsiadm: Could not... (0 Replies)
Discussion started by: humbletech99
0 Replies

4. UNIX for Dummies Questions & Answers

Sorting Difficulties

Hey guys, I am sort of new to unix and I am having difficulty sorting. What I am trying to do is sort a particular field in reversed order and another field in alphabetic order to create a new file that looks like this: MILLER,EDWARD AL 14 101293 9341 MOORE,HENRY 15 ... (6 Replies)
Discussion started by: nthamma
6 Replies

5. Shell Programming and Scripting

trying to cope with awk difficulties

The data we are searching is populated in this way: ----IP---------DAY----MONTH----DATE--------TIME---------YEAR 12.3234.34-----Fri------Nov-------15-------18:05:14 GMT---2008 I want the user to be able to search for the data according to month and year. However, I cannot quite figure out... (8 Replies)
Discussion started by: amatuer_lee_3
8 Replies

6. IP Networking

Proxy ARP Difficulties

edited ... (7 Replies)
Discussion started by: TheMaskedMan
7 Replies

7. Programming

Simple Network Program Difficulties

I'm trying to write 2 programs, client & server, that communicate with integers, however, all resources I have found on the net assume that you want to send and recieve information as a character array. I don't want to send my integers as characters, I want to send them as ints (casting them to... (2 Replies)
Discussion started by: Mistwolf
2 Replies
Login or Register to Ask a Question