SLES 15 SP7 with pam_faillock.so

SUSE Linux Enterprise Server
1

Hello
Has anyone used pam_faillock.so on “SUSE Linux Enterprise Server 15 SP7” for SSH access to lock out a user after 5 failed login attempts?

2

@softwallch Hi and welcome to the Forum :smiley:

It’s not recommended as it could create an issue with the likes of DoS,… It’s recommended to use pam_tally2 and then a timeout for the account.

https://documentation.suse.com/sles/15-SP7/html/SLES-all/sec-sec-user-management.html#sec-sec-prot-general-pam-lock-accounts

3

Hello @**malcolmlewis Thank you for your reply.
I have a question on this, is “pam_faillock.so” not the newer Version as "pam_tally2.so"and therefore safer?

I have “pam_tally2.so” on my server, but I wanted to try switching to “pam_faillock.so”

4

@softwallch I’ve not used it but man 8 pam_faillock and man 5 faillok.conf for configuration seems fairly easy? Fire up a virtual machine and test?