Comments on: Lock and Unlock User Account After Failed SSH Logins

By: rav kav

rav kav — Sun, 17 Sep 2023 18:36:13 +0000

i am using rhel 8.8.
i am able to get users locked out after 3 unsuccessful login attempts using “su – kav”.
but ssh is not getting user locked out.
ssh kav@192.168.3.144

I am using AuthSelect to manage system-auth/password-auth. Also using corresponding files in /etc/security/pwquality.conf + pwhistory + faillock.conf.

By: Kishorekarthik

Kishorekarthik — Fri, 23 Jun 2023 12:30:25 +0000

Can you also please update for Ubuntu 22.04 LTS

By: macha srinath

macha srinath — Mon, 02 Jan 2023 05:25:14 +0000

it’s not working for 1hour

By: Bastiaan

Bastiaan — Tue, 03 Aug 2021 16:02:08 +0000

It is better to disable password login all together in ssh, use key based login instead

By: Pradeep Kumar

Pradeep Kumar — Fri, 04 Jun 2021 03:03:48 +0000

In reply to Oriol. Hi Oriol, It would be in the same line. By doing so , we are implementing the same rule even for root user.

By: Oriol

Oriol — Thu, 03 Jun 2021 13:49:25 +0000

Thank you Pradeep, great article, but I believe “even_deny_root root_unlock_time=600” is not a new line but the continuation of the previous (additional parameters). Maybe that’s what you meant, but it is not very clear.

By: Irfan

Irfan — Tue, 01 Sep 2020 19:23:55 +0000

do you know how can i set max login limits for a specific group in linux?

By: Alan

Alan — Wed, 18 Dec 2019 15:47:12 +0000

Very clear explanation. Thank you!