Q

Turning on pam_tally.so

This Content Component encountered an error
Under Fedora Core 4, /etc/pam.d/system-auth says not to edit that file by hand because authconfig overwrites it. However, "man authconfig" doesn't say how to turn on pam_tally.so, and neither does the authconfig GUI. Can you tell me how to turn the pam_tally.so on? This is with regards to your article, "Account locking for Linux via PAM."

Sorry I should have addressed this as part of my tip. I am afraid there is no clean and easy way around this. I tend not to use the authconfig command (or the associated GUI) to configure systems. But if I have to run authconfig, I make copies of the system-auth file before running authconfig. That way I can add back in previous changes made to the file.

I also recommend the use of a central configuration manager like cfengine or puppet to keep files like this up to date from a central point.

This was first published in February 2007

Dig deeper on Linux system security best practices

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

-ADS BY GOOGLE

SearchDataCenter

SearchServerVirtualization

SearchCloudComputing

SearchEnterpriseDesktop

Close