Re: pam_tally2 with sshd

Thanks. My failure was putting the pam_tally2 module *after* the "@include common-auth" instead of before it. The only working example I have at hand is a RedHat 5.10 system where pam_tally (not pam_tally2) follows the whole "system-auth" stack, rather than precedes it. Thanks again.Nick On Tu

Re: pam_tally2 with sshd

Hi. On Tue, 23 Feb 2016 14:52:59 -0600 Nicholas Geovanis wrote: > Debian 8 jessie. > The goal is to block SSH logins with multiple incorrect password tries. > I've added these lines to my /etc/pam.d/sshd file: > > authoptionalpam_echo.so Before sshd pam_tally > authrequi

pam_tally2 with sshd

Debian 8 jessie. The goal is to block SSH logins with multiple incorrect password tries. I've added these lines to my /etc/pam.d/sshd file: authoptionalpam_echo.so Before sshd pam_tally authrequiredpam_tally2.so file=/var/log/tallylog deny=3 audit onerr=fail authoptiona