The configuration file as follows, set mistyped 3 times in a row, lock 10 seconds



But do not!!!!!!

CodePudding user response:

The/etc/PAM. D/SSHD (remote SSH)

The/etc/PAM. D/login (terminal)

Try to modify the two files

CodePudding user response:

Any pam_tally2 under query.lib file. So this module

CodePudding user response:

/root @ 2 ~ # vi/etc/PAM. D/login
PAM - 1.0 # %
Auth required pam_tally2. So deny=3 unlock_time=100 even_deny_root root_unlock_time=200 (under # % PAM - 1.0, that is, the second line, add content, must be written in the front, if write behind, while the user is locked, but as long as the user input the correct password, still can login! Line command means ordinary users and the root user to lock, lock 100 seconds, ordinary users root lock 200 seconds)
Auth [user_unknown=ignore success==ok to ignore ignore default=bad] pam_securetty. So
Auth substack system - auth