I followed the information below, however, it is strangely blocking me from entering a password upon entering the login prompt on the server:
To configure the system to lock out accounts after a number of incorrect login attempts and require an administrator to unlock the account using pam_faillock.so:
Add the following lines immediately below the pam_env.so statement in /etc/pam.d/system-auth:
auth [default=die] pam_faillock.so authfail deny=3 unlock_time=604800 fail_interval=900
auth required pam_faillock.so authsucc deny=3 unlock_time=604800 fail_interval=900
Locking out user accounts after a number of incorrect attempts prevents direct password guessing attacks. Ensuring that an administrator is involved in unlocking locked accounts draws appropriate attention to such situations.
I should mention this is part of a post script on a kickstart disc, but that shouldn't cause any errors... Any thoughts? The exact line I am using is:
sed -i "/pam_fprintd.so/ i auth [default=die] pam_faillock.so authfail deny=3 unlock_time=604800 fail_interval=900\nauth required pam_faillock.so authsucc deny=3 unlock_time=604800 fail_interval=900" /etc/pam.d/system-auth