Tuesday 8 January 2013

Change lock time in Exadata

In image 11.2.3.1.1, when entered a wrong password, we will have to wait 10 minutes before retry. How to change/remove this configuration?

Solution: 

1. Change the lock time in /etc/pam.d/sshd.

Log in as root and change the lock_time parameter in sshd file:

For example:

[root@mine-admin ~]# cat /etc/pam.d/sshd
#%PAM-1.0
auth       include      system-auth
auth       required     pam_tally2.so deny=50 onerr=fail lock_time=1 <Seconds>
.
.

2.  Please restart ssh for the change to take effect.

For example:

service sshd restart


Note: There might be a need to  change /etc/pam.d/login for KVM logins.

No comments:

Post a Comment