[ubuntu] pam_tally2 excessive logins

hi, i am using pam pam_tally.so to limit excessive logins and I noticed that Ubuntu doesn't have the fail_interval available like RHEL does.

my configuration is pretty standard but was wondering if there is debian/ubuntu solution via pam to specify a time frame for excessive logins? i.e "lock account is login more than 10 logins fail during a 10 minute window"

auth required pam_tally2.so file=/var/log/tallylog deny=10 even_deny_root
auth [success=1 default=ignore] pam_unix.so nullok_secure

Let's block ads! (Why?)

[ubuntu] pam_tally2 excessive logins