處理Account locked due to 217 failed logins的問題 [root@xxx1 ~]# scp 123.txt root@IP地址:/root Account locked due to 213 failed logins
Account locked due to 215 failed logins
Account locked due to 217 failed logins
[root@xxx2 ~]# pam_tally2 --user=root Login Failures Latest failure From root 226 04/14/14 10:51:15 172.25.128.80
pam_tally2: Unknown user [root@xxx2 ~]# pam_tally2 --user=root --reset Login Failures Latest failure From root 226 04/14/14 10:51:15 172.25.128.80 [root@xxx2 ~]# pam_tally2 --user=root Login Failures Latest failure From
需要查看pam認證模塊 vi /etc/pam.d/password-auth auth required pam_tally2.so file=/var/log/tallylog deny=3 even_deny_root unlock_time=1200
account required pam_tally2.so
用法： file=/var/log/tallylog – Default log file is used to keep login counts. deny=3 – Deny access after 3 attempts and lock down user. even_deny_root – Policy is also apply to root user. unlock_time=1200 – Account will be locked till 20 Min. (remove this parameters if you want to lock down permanently till manually unlock.)