<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:10pt"><div style="RIGHT: auto"><SPAN><BR class=yui-cursor></SPAN></div>
<div><VAR id=yui-ie-cursor></VAR>Hi,<BR>I was able to configure pam_tally on RHEL 5.5/6 and verify that account gets locked after 'n' unsuccessful attempts through different auth mechanisms like su, sshd, login etc. <BR><BR>I can also see the output of pam_tally or faillog that reflects the number of failed login attempts.<BR><BR>But when I try passwd -S <user name> after an account is locked through use of pam_tally, it does not relect account locked status. <BR><BR>see below for example output of faillog as well passwd -S after an account is locked using pam_tally<BR># faillog -u testuser1<BR>Login Failures Maximum <BR>testuser1 4 0<BR><BR># passwd -S testuser1<BR>testuser1 PS 10/17/2011 0 99999 7 -1<BR><BR>if I explicity lock a user using passwd -l option then the output of passwd -S reads as below<BR># passwd -S testuser1<BR>testuser1 LK 10/17/2011 0 99999 7 -1<BR><BR>Can any one tell me if pam_tally and passwd lock options understand each
other, if yes, is there any other configuration I have to do..<BR><BR>Thanks<BR>ADK<VAR id=yiv1196065169yui-ie-cursor></VAR></div><BR><BR></div></body></html>