pam_tally2 does not reset tally on successful login

kohsuke / libpam4j

libpam4j

http://libpam4j.kohsuke.org/

MIT License

44 stars 47 forks source link

pam_tally2 does not reset tally on successful login #14

Closed NilSet closed 8 years ago

NilSet commented 8 years ago

When the PAM module pam_tally2 is in use, it tallies the login attempts, in order to lock out accounts after a sequence of consecutive failed attempts. It is supposed to reset the count after a successful login, but it uses calls to pam_setcred to know that the full PAM stack succeeded in pam_authenticate, and libpam4j does not call this.

robrez commented 7 years ago

Ran into this issue. Would you consider making a new patch release?

http://mvnrepository.com/artifact/org.kohsuke/libpam4j