cant login after -l
zikkuratti opened this issue · 5 comments
cant login after -l which module make effect?
As per documentation: "Although it can perform a lockdown, as previously stated, I'd recommend you address the warnings via policy, documentation and configuration management. This is how I use the tool."
Having said that, I would suspect it is related to PAM, in particular it could be the tally module, I've seen this on some versions of Linux.
Do you have any more information, e.g. OS version? Messages, etc. That way I can add handing to the script to prevent this happening.
he knock my admin user from sudoers and tell login incorrerect non user non root
it's Ubuntu 20.04.6 LTS i check logs no warn on sudo user etc
I believe this may have been related to some OS version detection issues in system_auth_account_reset module.
I noticed a couple of OS version detection issue, which I've fixed.
I'm doing some updates and adding some feature. Once I'm done with this I'll do some more testing on Ubuntu for bugs.
I managed to reproduce this issue. Earlier versions of the CIS recommendations for Ubuntu 22.04 recommended pam_tally2.so, then pam_failback.so in /etc/pam.d/common-auth, the correct module is pam_faillock.so. This can be resolved by commenting out the line with pam_tally2.so / pam_failback.so, or replacing it the module entry in the file with pam_faillock.so.
The module that performs this operation in lunar is audit_system_auth_account_reset.
I will do further testing before closing this issue