How to lock users after 5 unsuccessful login tries?I gathered a few distributions/versions to how to do it, but I can't test it.RHEL4: by adding the: auth        required      /lib/security/$ISA/pam_tally.so no_magic_rootaccount     required      /lib/security/$ISA/pam_tally.so deny=5 reset no_magic_rootto: /etc/pam.d/system-auth/etc/pam.d/login/etc/pam.d/sshdRHEL4: ???SLES9: by adding the: auth required pam_tally.so no_magic_rootaccount required pam_tally.so deny=5 reset no_magic_rootto: /etc/pam.d/login/etc/pam.d/sshdSLES11 or SLES10: by adding the: auth required pam_tally.so deny=5 onerr=fail per_user no_lock_timeto: /etc/pam.d/common-authAND by adding the: account required pam_tally.soto: /etc/pam.d/common-accountQUESTION: Can someone please confirm it that this is the working/good way to lock users after 5 unsuccessful login tries? OR HOW TO DO THIS?p.s.: /sbin/pam_tally --user USERNAME --resetis a usefull thing to do before doing this? Can I lock out the root user with these? Editing PAM is a very sensitive thing, because People could lock out themselves from the server (I'm meaning ex.: the root user). Any hints when doing this?
How to lock users after 5 unsuccessful login tries?
password;pam;lock