Friday 24 April 2009

the local pam module and how to reset user account lockout

Sometimes you'll get a call that states that a user is locked out of their account as they tried their pw too many times incorrectly. Although they are NIS or LDAP accounts, however they interact with the local PAM module which can use an account lockout if too many access attempts are made. This only applies to Linux, Sun has no module like this.


command to check if user is locked

/sbin/pam_tally --user gbuser

to reset

/sbin/pam_tally --user gbuser --reset

No comments: