Pam_tally.so

Good Day,
	I have been trying to get Fedora Core 2 & 3 on a stand-alone Gx260 to lock
user accounts when the passwd has been put in wrong 5 times.
root@localhost> vi /etc/pam.d/system-auth
auth	required /lib/security/pam_tally.so	onerr=fail no_magic_root
account	required /lib/security/pam_tally.so	deny=5 no_magic_root reset

root@localhost> touch /var/log/faillog

root@localhost> pam_tally

I was able to login as a user and lock my screen and unlock it before
pam_tally.so was introduces.
Now that I have the above in and have tried to login 6 times with the wrong
passwd, it will not except the correct passwd.

I looked at the /etc/shadow file and I do not have an "!" in front of the
encryption which if it was there I would be locked out.

Also I brought up the User & Group Gui and the box is not checked as being a
locked account.

I have changed the passwd using passwd <username> as root and in the Gui as
root. I still cannot login in as the user.

If I comment out the two pam_tally.so lines in the /etc/pam.d/system-auth file
I have no problem logging in as this user.

I have read in a number of Fedora web sites that the pam_tally.so has a bug
and have not found a fix any where.

Is there another 3rd party software that will lock a user account after the
default number of tries have been reached.

Thanks in advance.

Paul A. Boland
IT System Engineer Admin-Unix
IAD -Information Assurance Division
General Dynamics C4 Systems
8220 E. Roosevelt St.  MD R6102A
Scottsdale, AZ. 85257
[voice] 480-441-4320
[fax]     480-441-0060
[page] [email protected]
[Email][email protected]


_______________________________________________
LinuxManagers mailing list - http://www.linuxmanagers.org
submissions: LinuxManagers-35TzE1X9F6582KRnZfj+bdi2O/[email protected]
subscribe/unsubscribe:
http://www.linuxmanagers.org/mailman/listinfo/linuxmanagers
_______________________________________________
LinuxManagers mailing list - http://www.linuxmanagers.org
submissions: LinuxManagers-35TzE1X9F6582KRnZfj+bdi2O/[email protected]
subscribe/unsubscribe: http://www.linuxmanagers.org/mailman/listinfo/linuxmanagers