0

I am searching for a way to configure some sort of back-off or wait time during failed authentication attempts. The idea is that after each failed authentication attempt, the user has to wait an increasing amount of time:

1. attempt > 5s back-off time > 2. attempts > 10s back-off time > 3. attempts > 15s back-off time > 4. attempt > user blocked

I was having a look at Red Hat's security guide and various PAM modules but couldn't find a suitable parameter.

Does anybody know how to configure such a feature?

| improve this question | |
  • Are we talking local authentication (like sudo) or remote authentication (ssh) here? – Panki Aug 27 '19 at 13:01
  • Local authentication primarily. But I would be interested in remote solutions as well. – user1192748 Aug 28 '19 at 7:50
  • 1
    A remote solution would be fail2ban – Panki Aug 28 '19 at 8:57

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.