Re: Fwd: [PECL-DEV] PAM Module to lock id
| From: | Ángel González | Date: | Wed, 13 Oct 2010 22:13:19 +0000 |
| Subject: | Re: Fwd: [PECL-DEV] PAM Module to lock id | ||
| References: | 1 2 3 4 5 6 7 8 | Groups: | php.pecl.dev php.pecl.dev |
| Request: | Send a blank email to pecl-dev+get-7752@lists.php.net to get a copy of this message | ||
Vishnu Gopal Singhal wrote:
> How it will lock ??My credentials are stored in a database. Im using
> pam_mysql to authenticate.
>
> *auth required pam_mysql.so user=abc passwd=vishnu host=localhost db=testdb
> table=Users usercolumn=UserName passwdcolumn=Password crypt=3*
>
> If i add below line it doesnt authenticate
>
> *password required pam_tally2.so deny=3 unlock_time=60*
> *
> *
> I'm not understanding how pam_tally2 locks as my credentials are in a db.??
> Can anyone explain me what happens when incorrect password is entered
> *
> *
> *Thanks!!*
> *
> *
pam_tally won't use /etc/passwd or the mysql db to store lockouts.
It stores the fails inside a file, by default /var/log/faillog in
pam_tally and
/var/log/tallylog in pam_tally2 (you can change it with file option).