pam_tally
counts login attempts
TLDR
Enable login counting (deprecated)
$ auth required pam_tally.so
Lock after failures$ auth required pam_tally.so deny=5
Reset tally$ pam_tally --user=[username] --reset
View tally$ pam_tally --user=[username]
SYNOPSIS
pam_tally.so [options]
DESCRIPTION
pam_tally counts login attempts. Locks accounts on failures.The module tracks failed logins. Deprecated, use pam_tally2.
PARAMETERS
deny=N
Lock after N failures.unlock_time=SECONDS
Auto unlock time.per_user
Per-user settings.--user NAME
Specify user.--reset
Reset counter.
CAVEATS
Deprecated. Use pam_tally2 instead. Legacy systems.
HISTORY
pamtally provided **login attempt counting** before pamtally2.
SEE ALSO
pam(8), pam_tally2(8), pam_faillock(8)