Account locked by pam_tally does not reflect in passwd -S

[Thorsten Kukuk]

On Tue, Oct 18, Anusuya K wrote:

> 
> 
> Hi,
> I was able to configure pam_tally on RHEL 5.5/6 and verify that account gets locked after 'n' unsuccessful attempts through different auth mechanisms like su, sshd, login etc. 
> 
> I can also see the output of pam_tally or faillog that reflects the number of failed login attempts.
> 
> But when I try passwd -S <user name> after an account is locked through use of pam_tally, it does not relect account locked status. 

pam_tally account locking via faillog has nothing to do with passwd.

  Thorsten

-- 
Thorsten Kukuk, Project Manager/Release Manager SLES
SUSE LINUX Products GmbH, Maxfeldstr. 5, D-90409 Nuernberg
GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 16746 (AG Nürnberg)