To block a user after a preset number of failed login attempts, one would use a module like
What is the difference between these two? Which one should I use when?
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. It only takes a minute to sign up.Sign up to join this community
It appears that
pam_faillock is the more evolved version, at least this was the case in 2016, when the author stated:
Comment (by tmraz):
I already submitted pam_faillock a few years ago. I agree with you that it should be included into Linux PAM and I really prefer not merging the code with pam_tally as the internal design is quite different. I'd prefer to obsolete pam_tally and pam_tally2 altogether as their design is flawed.
Among the differences is that
pam_faillock has improved handling of screensaver.