Hey guys, I've have a specific customer requirement:
"The system must display the number of unsuccessful login attempts since the last successful login for a user account upon logging in."

There are many posts out there but they tend to vary greatly and my preference is to use the community-supported/endorsed method. Other considerations would be:

Users will only login via ssh/console;
# cat /etc/securetty

I'm terrible with PAMs and the common paths to achieve this are just confusing me. Any direction would be appreciated.