Arch Linux

Ovion

Member

Registered: 2013-02-24

Posts: 78

[solved] Adjust the PAM-delay for wrong passwords

Hi,

I'd like to adjust the delay PAM has when verifying a wrong password. I found the nodelay-option, but this is not what I want, I still want to have a delay, just the default-2-second-delay is too much for me. I'd like to reduce that to 1 or half a second, which is sufficiently large to break brute-force-attacks on my passwords but still short enough not to annoy me.

I didn't find anything regarding this, the "delay=..."-option does not seem to work. Can anyone hint me to the correct way to do this?
Furthermore, there does not seem to be a default place to specify that for PAM in general, is there?

Thanks in advance!

Last edited by Ovion (2015-05-24 22:27:04)

karol

Archivist

Registered: 2009-05-06

Posts: 25,440

Re: [solved] Adjust the PAM-delay for wrong passwords

Have you read http://www.linux-pam.org/Linux-PAM-html … delay.html ?
http://unix.stackexchange.com/questions … t-password

Ovion

Member

Registered: 2013-02-24

Posts: 78

Re: [solved] Adjust the PAM-delay for wrong passwords

Ah, I was applying the delay-option to the wrong module, should be pam_faildelay.so

Thanks for (implicitly) pointing out.

karol

Archivist

Registered: 2009-05-06

Posts: 25,440

Re: [solved] Adjust the PAM-delay for wrong passwords

Glad you figured it out.
Please remember to mark the thread as solved https://bbs.archlinux.org/viewtopic.php?id=130309