Hey guys, I've have a specific customer requirement:
"The system must display the number of unsuccessful login attempts since the last successful login for a user account upon logging in."


There are many posts out there but they tend to vary greatly and my preference is to use the community-supported/endorsed method. Other considerations would be:

Users will only login via ssh/console;
# cat /etc/securetty
...
console
ttyS0
ttyS1
---

I'm terrible with PAMs and the common paths to achieve this are just confusing me. Any direction would be appreciated.

TT