|
@@ -381,10 +381,16 @@ function set_max_login_tries {
|
381
|
381
|
max_tries=$1
|
382
|
382
|
|
383
|
383
|
if ! grep ' deny=' /etc/pam.d/common-auth; then
|
384
|
|
- sed -i "/pam_deny.so/a auth required pam_tally2.so onerr=fail unlock_time=1800 deny=$max_tries" /etc/pam.d/common-auth
|
|
384
|
+ sed -i "/pam_deny.so/a auth required\t\t\tpam_tally.so onerr=fail no_lock_time per_user deny=$max_tries" /etc/pam.d/common-auth
|
385
|
385
|
else
|
386
|
386
|
sed -i "s| deny=.*| deny=$max_tries|g" /etc/pam.d/common-auth
|
387
|
387
|
fi
|
|
388
|
+
|
|
389
|
+ if ! grep ' deny=' /etc/pam.d/common-account; then
|
|
390
|
+ sed -i '/pam_deny.so/a account required\t\t\tpam_tally.so' /etc/pam.d/common-account
|
|
391
|
+ else
|
|
392
|
+ sed -i "s| deny=.*| deny=$max_tries|g" /etc/pam.d/common-account
|
|
393
|
+ fi
|
388
|
394
|
}
|
389
|
395
|
|
390
|
396
|
function setup_firewall {
|