Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
What are the effects of disabling pam tally?
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
Philippe23
Tux's lil' helper
Tux's lil' helper


Joined: 20 Dec 2006
Posts: 115
Location: Rome, NY

PostPosted: Thu Dec 18, 2014 12:20 am    Post subject: What are the effects of disabling pam tally? Reply with quote

Recently, I've been getting hundreds of PAM Tally overflow for root in my logs:
Quote:
Dec 17 18:40:16 localhost sshd[6174]: pam_tally2(sshd:auth): Tally overflowed for user root
Dec 17 18:40:28 localhost sshd[6189]: pam_tally2(sshd:auth): Tally overflowed for user root

I've been running "sudo pam_tally --file /var/log/tallylog --reset" to get rid of these warnings when they pop up, and they stay away for a little while.

I have "PermitRootLogin no" set in /etc/sshd_config, so I'm not too concerned about these specific lines. I'm also running denyhosts to protect SSH, and fail2ban to protect other services (SMTP, POP, IMAP, etc).

Is there a way to disable tally? Is it safe to do so?

Here's my /etc/pam.d/system-login for reference -- it's the only thing in /etc/pam.d/ that references tally. (I've never modified it myself.)
Quote:
auth required pam_tally2.so onerr=succeed
auth required pam_shells.so
auth required pam_nologin.so
auth include system-auth

account required pam_access.so
account required pam_nologin.so
account include system-auth
account required pam_tally2.so onerr=succeed

password include system-auth

session optional pam_loginuid.so
session required pam_env.so
session optional pam_lastlog.so silent
session include system-auth
session optional pam_motd.so motd=/etc/motd
session optional pam_mail.so
Back to top
View user's profile Send private message
charles17
Advocate
Advocate


Joined: 02 Mar 2008
Posts: 2583

PostPosted: Thu Dec 18, 2014 8:33 am    Post subject: Reply with quote

Sorry, I cannot answer your question. But do you really need pam at all? https://forums.gentoo.org/viewtopic-t-1000290-highlight-pam.html
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum