vi /etc/pam.d/password-auth
添加如下内容
auth required pam_faillock.so preauth audit silent deny=5unlock_time=604800
auth [success=1 default=bad] pam_unix.so
auth [default=die] pam_faillock.so authfail audit deny=5unlock_time=604800
auth sufficient pam_faillock.so authsucc audit deny=5unlock_time=604800
auth required pam_deny.so
保存退出
vi /etc/pam.d/system-auth
添加如下内容
auth required pam_env.so
auth required pam_faillock.so preauth audit silent deny=5 unlock_time=604800
auth [success=1 default=bad] pam_unix.so
auth [default=die] pam_faillock.so authfail audit deny=5unlock_time=604800
auth sufficient pam_faillock.so authsucc audit deny=5unlock_time=604800
auth required pam_deny.so
保存退出
604800=7天