[ale] What creates /var/log/faillog ?

[Scott McBrien]

Raj,

Trigger the pam_tally2 module, it should drop the faillog into place.  Also, you'll want the pam_tally2 rules in your password-auth as well.  

I did a Red Hat Summit presentation on this and password complexity last year (updated for RHEL7) http://people.redhat.com/~smcbrien

Also I did a Taste of Training webinar on it for RHEL6.4:
http://www.redhat.com/en/services/training/taste-of-training

-Scott


> On Sep 22, 2014, at 9:40 AM, Raj Wurttemberg <rajaw at c64.us> wrote:
> 
> 
> My Google-Fu must be running low this this morning...  
> 
> What creates /var/log/faillog ? I have a RHCE 6.5 server and a security
> auditor said that we should have a /var/log/faillog file. I have the
> "pam_tally2" module loaded in the auth file "system-auth-ac" .  The
> pam_tally2 command does appear to give proper results as well.
> 
> Kind regards,
> Raj Wurttemberg
> rajaw at c64.us
> 
> 
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo