Skip to content

Commit 23a3ea8

Browse files
committed
1 parent dc39541 commit 23a3ea8

File tree

1 file changed

+20
-0
lines changed
  • files/common/var/lib/delphix-platform/ansible/10-delphix-platform/roles/delphix-platform/tasks

1 file changed

+20
-0
lines changed

files/common/var/lib/delphix-platform/ansible/10-delphix-platform/roles/delphix-platform/tasks/main.yml

+20
Original file line numberDiff line numberDiff line change
@@ -336,6 +336,26 @@
336336
regexp: '^#?[\s]*(auth[\s]+required[\s]+pam_wheel\.so.*)$'
337337
replace: '\1'
338338

339+
#
340+
#
341+
# Lock out the user after an unsuccessful consecutive login attempts.
342+
#
343+
- lineinfile:
344+
path: /etc/pam.d/common-auth
345+
line: "{{ item }}"
346+
with_items:
347+
- 'auth required pam_tally2.so onerr=fail audit silent deny=5 unlock_time=900'
348+
349+
#
350+
#
351+
# Configuration to remember user password history.
352+
#
353+
- lineinfile:
354+
path: /etc/pam.d/common-password
355+
line: "{{ item }}"
356+
with_items:
357+
- 'password required pam_pwhistory.so remember=5'
358+
339359
#
340360
# Enable SNMP client tools to load MIBs by default.
341361
#

0 commit comments

Comments
 (0)