centos5.9的pam_tally.so模块没生效（标题已改）

du_liang

回复 19# q1208c

[root@localhost ~]# rpm -qf /etc/pam.d/ -l
/etc/pam.d
/etc/pam.d/config-util
/etc/pam.d/other
/etc/pam.d/system-auth
/etc/security
/etc/security/access.conf
/etc/security/chroot.conf
/etc/security/console.apps
/etc/security/console.handlers
/etc/security/console.perms
/etc/security/console.perms.d
/etc/security/console.perms.d/50-default.perms
/etc/security/group.conf
/etc/security/limits.conf
/etc/security/limits.d
/etc/security/namespace.conf
/etc/security/namespace.init
/etc/security/opasswd
/etc/security/pam_env.conf
/etc/security/time.conf
/lib/libpam.so.0
/lib/libpam.so.0.81.5
/lib/libpam_misc.so.0
/lib/libpam_misc.so.0.81.2
/lib/libpamc.so.0
/lib/libpamc.so.0.81.0
/lib/security
/lib/security/pam_access.so
/lib/security/pam_chroot.so
/lib/security/pam_console.so
/lib/security/pam_cracklib.so
/lib/security/pam_debug.so
/lib/security/pam_deny.so
/lib/security/pam_echo.so
/lib/security/pam_env.so
/lib/security/pam_exec.so
/lib/security/pam_faildelay.so
/lib/security/pam_filter
/lib/security/pam_filter.so
/lib/security/pam_filter/upperLOWER
/lib/security/pam_ftp.so
/lib/security/pam_group.so
/lib/security/pam_issue.so
/lib/security/pam_keyinit.so
/lib/security/pam_lastlog.so
/lib/security/pam_limits.so
/lib/security/pam_listfile.so
/lib/security/pam_localuser.so
/lib/security/pam_loginuid.so
/lib/security/pam_mail.so
/lib/security/pam_mkhomedir.so
/lib/security/pam_motd.so
/lib/security/pam_namespace.so
/lib/security/pam_nologin.so
/lib/security/pam_permit.so
/lib/security/pam_postgresok.so
/lib/security/pam_pwhistory.so
/lib/security/pam_rhosts.so
/lib/security/pam_rhosts_auth.so
/lib/security/pam_rootok.so
/lib/security/pam_rps.so
/lib/security/pam_securetty.so
/lib/security/pam_selinux.so
/lib/security/pam_shells.so
/lib/security/pam_stack.so
/lib/security/pam_stress.so
/lib/security/pam_succeed_if.so
/lib/security/pam_tally.so
/lib/security/pam_tally2.so
/lib/security/pam_time.so
...
系统里有的，我把$ISA 变量去掉试试


   

du_liang

回复 19# q1208c

我现在的配置：
vim /etc/pam.d/system-auth

auth        required      pam_env.so
auth        required      pam_tally.so  onerr=fail deny=3 unlock_time=300
auth        required      /lib/security/pam_tally.so onerr=fail deny=3 unlock_time=300
auth        required      pam_tally.so  onerr=fail deny=3 unlock_time=300
auth        required      /lib/security/pam_tally.so onerr=fail deny=3 unlock_time=300
auth        sufficient    pam_unix.so nullok try_first_pass
auth        requisite     pam_succeed_if.so uid >= 500 quiet
auth        required      pam_deny.so