处理Account locked due to 217 failed logins的问题

Posted 2020-09-26 星火spark

处理Account locked due to 217 failed logins的问题 [[email protected] ~]# scp 123.txt [email protected]地址:/root Account locked due to 213 failed logins

Account locked due to 215 failed logins

Account locked due to 217 failed logins

 

[[email protected] ~]# pam_tally2 --user=root Login           Failures Latest failure     From root              226    04/14/14 10:51:15  172.25.128.80

pam_tally2: Unknown user [[email protected] ~]# pam_tally2 --user=root --reset Login           Failures Latest failure     From root              226    04/14/14 10:51:15  172.25.128.80 [[email protected] ~]# pam_tally2 --user=root Login           Failures Latest failure     From

 

需要查看pam认证模块 vi /etc/pam.d/password-auth auth        required      pam_tally2.so  file=/var/log/tallylog deny=3 even_deny_root unlock_time=1200

account     required      pam_tally2.so

 

用法： file=/var/log/tallylog – Default log file is used to keep login counts. deny=3 – Deny access after 3 attempts and lock down user. even_deny_root – Policy is also apply to root user. unlock_time=1200 – Account will be locked till 20 Min. (remove this parameters if you want to lock down permanently till manually unlock.)