I am searching for a way to configure some sort of back-off or wait time during failed authentication attempts. The idea is that after each failed authentication attempt, the user has to wait an increasing amount of time:
1. attempt > 5s back-off time > 2. attempts > 10s back-off time > 3. attempts > 15s back-off time > 4. attempt > user blocked
I was having a look at Red Hat's security guide and various PAM modules but couldn't find a suitable parameter.
Does anybody know how to configure such a feature?