I am searching for a way to configure some sort of back-off or wait time during failed authentication attempts. The idea is that after each failed authentication attempt, the user has to wait an increasing amount of time:
1. attempt > 5s back-off time > 2. attempts > 10s back-off time > 3. attempts > 15s back-off time > 4. attempt > user blocked
I was having a look at Red Hat's security guide and various PAM modules but couldn't find a suitable parameter.
Does anybody know how to configure such a feature?
sudo
) or remote authentication (ssh
) here? – Panki Aug 27 '19 at 13:01fail2ban
– Panki Aug 28 '19 at 8:57