How to effectively enforce a delay after a failed login attempt?

Rayleigh · 2019-07-05 10:07:26

After following exactly what wiki says here: https://wiki.archlinux.org/index.php/Se … in_attempt

auth optional pam_faildelay.so delay=20000000

I have the following problem. When I hit the wrong password the delay starts "counting" as expected but, by hitting "esc" I can then re-enter my password without having to wait for the delay to finish. Is this normal? In any case, what should I do, to effectively enforce the delay?

seth · 2019-07-05 12:23:52

idk what that even is - any reason you're not using "man pam_tally"? (In particular deny and un|lock_time)?

Rayleigh · 2019-07-05 13:58:07

This is the first time I've heard of it. I'm gonna try configure it (pam_tally2) tonight and I' ll make sure to update the post. Thanks!

Rayleigh · 2019-07-05 19:03:30

Well after paying attention I realized that I do know pam_tally2 and am actually using it, not to enforce delay after a login attempt, but rather to lockout a user after x failed login attempts. Maybe I can do both I'll check.

Last edited by Rayleigh (2019-07-05 19:07:27)

seth · 2019-07-05 19:08:12

Edit on edit
What exactly are you looking for then (and why don't you use tally to enforce the delay)?

Last edited by seth (2019-07-05 19:08:49)

Arch Linux

#1 2019-07-05 10:07:26

How to effectively enforce a delay after a failed login attempt?

#2 2019-07-05 12:23:52

Re: How to effectively enforce a delay after a failed login attempt?

#3 2019-07-05 13:58:07

Re: How to effectively enforce a delay after a failed login attempt?

#4 2019-07-05 19:03:30

Re: How to effectively enforce a delay after a failed login attempt?

#5 2019-07-05 19:08:12

Re: How to effectively enforce a delay after a failed login attempt?

Board footer