Skip to content

Commit a0dc8bb

Browse files
committed
1 parent dc39541 commit a0dc8bb

File tree

1 file changed

+22
-0
lines changed
  • files/common/var/lib/delphix-platform/ansible/10-delphix-platform/roles/delphix-platform/tasks

1 file changed

+22
-0
lines changed

files/common/var/lib/delphix-platform/ansible/10-delphix-platform/roles/delphix-platform/tasks/main.yml

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -336,6 +336,28 @@
336336
regexp: '^#?[\s]*(auth[\s]+required[\s]+pam_wheel\.so.*)$'
337337
replace: '\1'
338338

339+
#
340+
#
341+
# Lock out the user after an unsuccessful consecutive login attempts.
342+
#
343+
- lineinfile:
344+
path: /etc/pam.d/common-auth
345+
line: "{{ item }}"
346+
insertafter: BOF
347+
with_items:
348+
- 'auth required pam_tally2.so audit silent deny=5 unlock_time=900'
349+
350+
#
351+
#
352+
# Configuration to remember user password history.
353+
#
354+
- lineinfile:
355+
path: /etc/pam.d/common-account
356+
line: "{{ item }}"
357+
insertafter: EOF
358+
with_items:
359+
- 'account required pam_tally2.so'
360+
339361
#
340362
# Enable SNMP client tools to load MIBs by default.
341363
#

0 commit comments

Comments
 (0)