Q

Turning on pam_tally.so

Under Fedora Core 4, /etc/pam.d/system-auth says not to edit that file by hand because authconfig overwrites it. However, "man authconfig" doesn't say how to turn on pam_tally.so, and neither does the authconfig GUI. Can you tell me how to turn the pam_tally.so on? This is with regards to your article, "Account locking for Linux via PAM."

Sorry I should have addressed this as part of my tip. I am afraid there is no clean and easy way around this. I...

tend not to use the authconfig command (or the associated GUI) to configure systems. But if I have to run authconfig, I make copies of the system-auth file before running authconfig. That way I can add back in previous changes made to the file.

I also recommend the use of a central configuration manager like cfengine or puppet to keep files like this up to date from a central point.

This was last published in February 2007

Dig Deeper on Linux system security best practices

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

Start the conversation

Send me notifications when other members comment.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Please create a username to comment.

-ADS BY GOOGLE

SearchDataCenter

SearchServerVirtualization

SearchCloudComputing

SearchEnterpriseDesktop

Close