Files
ansible-collection-hardening/roles/os_hardening/templates/usr/share/pam-configs/pam_tally2.j2
T

14 lines
392 B
Django/Jinja

{{ ansible_managed | comment }}
# Generated by Ansible {{ ansible_role_name }}
Name: tally2 lockout after failed attempts enforcement
Default: yes
Priority: 1024
Conflicts: cracklib
Auth-Type: Primary
Auth-Initial:
required pam_tally2.so deny={{ os_auth_retries }} onerr=fail unlock_time={{ os_auth_lockout_time }}
Account-Type: Primary
Account-Initial:
required pam_tally2.so