# Configuration for locking the user after multiple failed

[0] Fix | Delete

# authentication attempts.

[1] Fix | Delete

#

[2] Fix | Delete

# The directory where the user files with the failure records are kept.

[3] Fix | Delete

# The default is /var/run/faillock.

[4] Fix | Delete

# dir = /var/run/faillock

[5] Fix | Delete

#

[6] Fix | Delete

# Will log the user name into the system log if the user is not found.

[7] Fix | Delete

# Enabled if option is present.

[8] Fix | Delete

# audit

[9] Fix | Delete

#

[10] Fix | Delete

# Don't print informative messages.

[11] Fix | Delete

# Enabled if option is present.

[12] Fix | Delete

# silent

[13] Fix | Delete

#

[14] Fix | Delete

# Don't log informative messages via syslog.

[15] Fix | Delete

# Enabled if option is present.

[16] Fix | Delete

# no_log_info

[17] Fix | Delete

#

[18] Fix | Delete

# Only track failed user authentications attempts for local users

[19] Fix | Delete

# in /etc/passwd and ignore centralized (AD, IdM, LDAP, etc.) users.

[20] Fix | Delete

# The `faillock` command will also no longer track user failed

[21] Fix | Delete

# authentication attempts. Enabling this option will prevent a

[22] Fix | Delete

# double-lockout scenario where a user is locked out locally and

[23] Fix | Delete

# in the centralized mechanism.

[24] Fix | Delete

# Enabled if option is present.

[25] Fix | Delete

# local_users_only

[26] Fix | Delete

#

[27] Fix | Delete

# Deny access if the number of consecutive authentication failures

[28] Fix | Delete

# for this user during the recent interval exceeds n tries.

[29] Fix | Delete

# The default is 3.

[30] Fix | Delete

# deny = 3

[31] Fix | Delete

#

[32] Fix | Delete

# The length of the interval during which the consecutive

[33] Fix | Delete

# authentication failures must happen for the user account

[34] Fix | Delete

# lock out is <replaceable>n</replaceable> seconds.

[35] Fix | Delete

# The default is 900 (15 minutes).

[36] Fix | Delete

# fail_interval = 900

[37] Fix | Delete

#

[38] Fix | Delete

# The access will be reenabled after n seconds after the lock out.

[39] Fix | Delete

# The value 0 has the same meaning as value `never` - the access

[40] Fix | Delete

# will not be reenabled without resetting the faillock

[41] Fix | Delete

# entries by the `faillock` command.

[42] Fix | Delete

# The default is 600 (10 minutes).

[43] Fix | Delete

# unlock_time = 600

[44] Fix | Delete

#

[45] Fix | Delete

# Root account can become locked as well as regular accounts.

[46] Fix | Delete

# Enabled if option is present.

[47] Fix | Delete

# even_deny_root

[48] Fix | Delete

#

[49] Fix | Delete

# This option implies the `even_deny_root` option.

[50] Fix | Delete

# Allow access after n seconds to root account after the

[51] Fix | Delete

# account is locked. In case the option is not specified

[52] Fix | Delete

# the value is the same as of the `unlock_time` option.

[53] Fix | Delete

# root_unlock_time = 900

[54] Fix | Delete

#

[55] Fix | Delete

# If a group name is specified with this option, members

[56] Fix | Delete

# of the group will be handled by this module the same as

[57] Fix | Delete

# the root account (the options `even_deny_root>` and

[58] Fix | Delete

# `root_unlock_time` will apply to them.

[59] Fix | Delete

# By default, the option is not set.

[60] Fix | Delete

# admin_group = <admin_group_name>

[61] Fix | Delete

[62] Fix | Delete