Bug in pam_tally on Red Hat Enterprise Linux Server release5.1(Tikanga).
Tomas Mraz
tmraz at redhat.com
Mon Jul 21 14:12:00 UTC 2008
There is /usr/share/doc/pam-<version>/txts/README.pam_tally.
Tomas Mraz
On Mon, 2008-07-21 at 14:07 +0000, Tangren, Bill wrote:
> Except for the onerr=fail, and "per_user", mine is the same as what you
> give, and I still have this error.
>
> I have onerr=succeed because the screen saver cannot write to the
> faillog, so users cannot unlock their screen savers. Don't know what
> "per_user" does. There doesn't seem to be a pam_tally man page to read.
>
>
> > -----Original Message-----
> > From: pam-list-bounces at redhat.com [mailto:pam-list-
> > bounces at redhat.com] On Behalf Of Tomas Mraz
> > Sent: Monday, July 21, 2008 8:33 AM
> > To: Pluggable Authentication Modules
> > Subject: RE: Bug in pam_tally on Red Hat Enterprise Linux Server
> > release5.1(Tikanga).
> >
> > On Mon, 2008-07-21 at 12:27 +0000, Tangren, Bill wrote:
> > > Will this work for RHEL ES 4.5 as well, or are there
> > modifications
> > > needed?
> > >
> > No, you have to use something similar to:
> >
> > >
> > > following lines works for RHEL-3 & RHEL-4 version with pam-0.77-
> > 66.23
> > > version without any problems but not working for RHEL-5
> > >
> > > auth required /lib/security/$ISA/pam_tally.so
> > onerr=fail
> > > no_magic_root
> > > account required /lib/security/$ISA/pam_tally.so
> > per_user
> > > deny=3 no_magic_root reset
> >
> > >
> > --
> > Tomas Mraz
> > No matter how far down the wrong road you've gone, turn back.
> > Turkish proverb
> >
> > _______________________________________________
> > Pam-list mailing list
> > Pam-list at redhat.com
> > https://www.redhat.com/mailman/listinfo/pam-list
>
>
>
> _______________________________________________
> Pam-list mailing list
> Pam-list at redhat.com
> https://www.redhat.com/mailman/listinfo/pam-list
--
Tomas Mraz
No matter how far down the wrong road you've gone, turn back.
Turkish proverb
More information about the Pam-list
mailing list