Browsing All Posts published on »March, 2019«

ACCOUNT LOCKED AFTER FAILED ATTEMPT [RHEL7]

March 13, 2019

0

ENVIRONMENT OS = RHEL 7 First one need to edit /etc/pam.d/password-auth and /etc/pam.d/system-auth and add highlighted / bold lines accurately auth required pam_env.so auth required pam_faillock.so preauth silent audit deny=3 unlock_time=600 auth sufficient pam_unix.so nullok try_first_pass auth [default=die] pam_faillock.so authfail audit deny=3 unlock_time=600   Then you need to add below line under account section at […]

RESTRICT SPECIFIC USER TO SU THE ROOT USER [RHEL7]

March 13, 2019

0

ENVIRONMENT OS = 7.3 redhat STEP-1 Open the file /etc/pam.d/su in vi or ay file editor and add the below line. vi /etc/pam.d/su auth      required      pam_wheel.so use_uid root_only use_uid group=groupa STEP-2 Ensure that the user who you want to su to the root user is the member of groupa.