This refers to another question at sudo does not prompt for password and reports 3 incorrect password attempts

The problem is, when the following line was added to /etc/pam.d/system-auth-ac to fix RHEL-06-000357,

auth [default=die] pam_faillock.so authfail deny=3 unlock_time=604800 fail_interval=900 
auth required pam_faillock.so authsucc deny=3 unlock_time=604800 fail_interval=900

sudo fails with

Sorry, try again.
Sorry, try again.
Sorry, try again.
sudo: 3 incorrect password attempts

Without trying to ask for any password. This happens in both Putty and PowerShell. Commenting out the 2 lines allows sudo to ask for password and run other commands successfully.

For security reason I'm required to disable root account and block excessive login, so I'd like to know if there are any fix that allow using the pam_faillock.so without affecting sudo?

Thanks in advance.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.