PAM Problem with pam_tally

Paul Whitney paul.whitney at mac.com
Thu May 3 20:52:56 UTC 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Actually, works fine now. I used an executable called faillog. I will try
the pally out tomorrow at work.

The --reset option requires two or one hyphen?

P.

- -----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.0.6 (Build 6060)

iQEVAwUBRjpLpLdVg+viRqgEAQh6YAf9EuVGQViayrmwLlbR/NF16wCyl6YTqg9x
ugW4t6yZdFAi2QgyG8eDGFvzVUtYJTcRLujQkOydZTA5n240vwSTJk9TIlMeLghs
WXvcsp12x0qxHNC4UGYw4y1mS1zIWeRONuJoKH6EtvZDnXP0qxgHnZ5SWeCbG1yJ
Kv8JTY6ryj+eu9Jfgs6mGjdqji01kadn9Uih57WynM7CN+15svIb37O6/OO2av79
nY1CHsLcJL3hnJ3QX0g6C6UuGuNfN6bkMg3VkGpC/sj3bP5/CM3WMhvlQ+YoQ6sE
IhjFX/dUgTKtrTe1Zd6QxCFyS4ZvjoNnQm4PE1qEmujPACWZV5UImQ==
=PQV6
- -----END PGP SIGNATURE-----


On 5/3/07 2:50 AM, "Scott Ruckh" <sruckh at gemneye.org> wrote:

> On Tue, 2007-05-01 at 19:48 -0400, Paul Whitney wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA256
>> 
>> I have a problem with the tally option. I have set the max retry's to 3.
>> When I type in the wrong password three times, I manage to lock out the
>> account. I thought I set the lockout time to 900 seconds (15 min) and set
>> the retry. 
>> 
>> Apparently the account is completely locked out and I cannot figure out how
>> to unlock it.
>> 
>> Paul
> 
> Have you tried 'pam_tally --reset'?  This assumes you installed the PAM
> tally utilities.  You can also reset the PAM tally for an individual
> user.  I believe the syntax is 'pam_tally --reset -u username'.  I think
> running pam_tally without any parameters will list the different
> options.
> 
> I am not sure if the helps your situation or not.  If you believe all
> the other account settings look like the account should be enabled then
> resetting the tally should be a good place to start.
> 
> _______________________________________________
> Pam-list mailing list
> Pam-list at redhat.com
> https://www.redhat.com/mailman/listinfo/pam-list



-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.0.6 (Build 6060)

iQEVAwUBRjpLr7dVg+viRqgEAQhNHAf+JxN3641JG2ix9BKNVaUGT4v1UEQYvh/4
Brr2RTKcAg1AOcA9+JrbqSpuynydSBUSLZ2MgN+YkNYrFcFtCQG2L0GlxjcPGCuI
N0fofOdLeXLU2hYtkWhrK2+HN8xj30pFGcUm6n4RR7H3s4+sy65j5gX6NerHqk6k
0zUqJe0yPz+6/KbXgxSVBtOExkxnFhBOOvvGrfn2hUcDJzTxsy0TquDWcdVbI/sC
AmupoylyyRzmIC+5/SmdgUm1SauTXkbsHq/eLUXI+LbBaKvbIlMebfCSclhTpjiu
rnQcmSwOSPZtGWpCL1ujKugyDyrMhngHWa3wBsxtXb2zwTBkjuWUdA==
=NxYH
-----END PGP SIGNATURE-----




More information about the Pam-list mailing list