[Pam-developers] Add user lock out based on days since last login

Dmitry V. Levin ldv at altlinux.org
Tue Apr 17 14:52:18 UTC 2012


On Thu, Apr 12, 2012 at 08:36:01PM +0200, Tomas Mraz wrote:
> The attached patch adds auth and account types to the pam_lastlog
> module. The module will then provide possibility to lock out users that
> did not log-in (based on the lastlog file contents) recently enough.

If I read the code right, it is going to be lock out after 90 days of
inactivity by default, which is a change in behavior.  Wouldn't it be
better to activate this new feature only when inactive= option is
specified?


-- 
ldv
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
URL: <https://fedorahosted.org/pipermail/pam-developers/attachments/20120417/5eb9bf9b/attachment.sig>


More information about the Pam-developers mailing list