freebsd security - Oct 2003 - No subject

I have asked this before in -questions but due to a odd security
   requirement, I need the option to auto lock a normal user's account
   (root and those in the wheel group must be excluded) after let say, 3,
   login failures. I know this can cause a DoS issue but I HAVE to have
   the option of doing it in FreeBSD.
   Any info is appreciated
   Thanks.
   Mike C
   carlson39@llnl.gov

   Michael Carlson
    .oooooo..o ooo        ooooo           ooooooooo.   ooooooooooooo
   d8P'    `Y8 `88.       .888'           `888   `Y88. 8'   888   `8
   Y88bo.       888b     d'888   .oooo.    888   .d88'      888
    `"Y8888o.   8 Y88. .P  888  `P  )88b   888ooo88P'       888     
(-.)
        `"Y88b  8  `888'   888   .oP"888   888`88b.         888   
cc )
   oo     .d8P  8    Y     888  d8(  888   888  `88b.       888     3-n-(
   8""88888P'  o8o        o888o `Y888""8o o888o  o888o  
o888o
   _(|/`->
   System Management and Related Technologies
   (925) 422-2958
   Cell: 925-784-5987

On Thu, Oct 30, 2003 at 08:45:03AM -0800, Michael Carlson
wrote:
> 
>    I have asked this before in -questions but due to a odd security
>    requirement, I need the option to auto lock a normal user's account
>    (root and those in the wheel group must be excluded) after let say, 3,
>    login failures. I know this can cause a DoS issue but I HAVE to have
>    the option of doing it in FreeBSD.
I don't much experience with pam(8), but there is some mention of
'sessions' in the manpage:

        session  - this group of tasks cover things that should be
       done prior to a service being given and after it is  with-
       drawn.  Such tasks include the maintenance of audit trails
       and the mounting of the user's home directory. The session
       management group is important as it provides both an open-
       ing and closing hook for modules to  affect  the  services
       available to a user. 

Perhaps that's a place to introduce a hook for what you need...
>    Any info is appreciated
>    Thanks.
>    Mike C
>    carlson39@llnl.gov
-- 
Brian 'you Bastard' Reichert		<reichert@numachi.com>
37 Crystal Ave. #303			Daytime number: (603) 434-6842
Derry NH 03038-1713 USA			BSD admin/developer at large