remove pam_tally2

Signed-off-by: Martin Schurz <[email protected]>

roles/os_hardening/templates/etc/pam.d/rhel_system_auth.j2

@@ -3,7 +3,6 @@
 
 #%PAM-1.0
 {% if os_auth_retries > 0 %}
-auth        required      pam_tally2.so deny={{ os_auth_retries }} onerr=fail unlock_time={{ os_auth_lockout_time }}
 {% endif %}
 auth        required      pam_env.so
 auth        sufficient    pam_unix.so nullok try_first_pass
@@ -11,7 +10,6 @@ auth        requisite     pam_succeed_if.so uid >= 500 quiet
 auth        required      pam_deny.so
 
 {% if os_auth_retries > 0 %}
-account     required      pam_tally2.so
 {% endif %}
 account     required      pam_unix.so
 account     sufficient    pam_localuser.so