[Pam-developers] Add user lock out based on days since last login

Dmitry V. Levin ldv at altlinux.org
Tue Apr 17 15:31:46 UTC 2012


On Tue, Apr 17, 2012 at 05:13:05PM +0200, Tomas Mraz wrote:
> On Tue, 2012-04-17 at 18:52 +0400, Dmitry V. Levin wrote: 
> > On Thu, Apr 12, 2012 at 08:36:01PM +0200, Tomas Mraz wrote:
> > > The attached patch adds auth and account types to the pam_lastlog
> > > module. The module will then provide possibility to lock out users that
> > > did not log-in (based on the lastlog file contents) recently enough.
> > 
> > If I read the code right, it is going to be lock out after 90 days of
> > inactivity by default, which is a change in behavior.  Wouldn't it be
> > better to activate this new feature only when inactive= option is
> > specified?
> 
> This is no change in behavior as pam_lastlog could never be used in auth
> or account phase before as it did not implement the callbacks for auth
> and account.

OK then.


-- 
ldv
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
URL: <https://fedorahosted.org/pipermail/pam-developers/attachments/20120417/617ad554/attachment-0001.sig>


More information about the Pam-developers mailing list