CentOS - Aug 2007 - delay after wrong password

Hi list

If a user connect by Console or OpenSSH and type in the wrong
password, I wish to delay the next password prompt. Use case is for
example brute force attacks.

I played with FAIL_DELAY in login.defs, but without success.

cheers
Simon

-- 
XMPP: sjolle at swissjabber.org

> Hi list
>
> If a user connect by Console or OpenSSH and type in the wrong
> password, I wish to delay the next password prompt. Use case is for
> example brute force attacks.
>
> I played with FAIL_DELAY in login.defs, but without success.
>
> cheers
> Simon
>
> --
> XMPP: sjolle at swissjabber.org
try using the PAM method..

http://www.kernel.org/pub/linux/libs/pam/Linux-PAM-html/sag-pam_faildelay.html

wfm.. ymmv

ed