On Exadata after failed login accounts even root account gets locked. Play with values below to increase hits
$ grep -i pam_tally2 /etc/pam.d/sshd
auth required pam_tally2.so deny=5 onerr=fail lock_time=600 serialize
$ grep -i pam_tally2 /etc/pam.d/login
auth required pam_tally2.so deny=5 onerr=fail lock_time=600 serialize
Meaning of options:
1) deny=5 <<<<<< user account will be locked after 5 in-correct wrong passwords
2) lock_time=600 <<<< user account will be locked for 600 seconds i.e. for next 10mins
When Input Wrong Root Password Login Exadata System, We Have To Wait For 10mins ( Doc ID 1541862.1 )
use vi editor to change it to 10 seconds
vi /etc/pam.d/sshd
auth required pam_tally2.so deny=5 onerr=fail lock_time=10 serialize
*************************************************************************
To reset ssh for a user and allow logins
pam_tally2 -r -u oracle
$ grep -i pam_tally2 /etc/pam.d/sshd
auth required pam_tally2.so deny=5 onerr=fail lock_time=600 serialize
$ grep -i pam_tally2 /etc/pam.d/login
auth required pam_tally2.so deny=5 onerr=fail lock_time=600 serialize
Meaning of options:
1) deny=5 <<<<<< user account will be locked after 5 in-correct wrong passwords
2) lock_time=600 <<<< user account will be locked for 600 seconds i.e. for next 10mins
When Input Wrong Root Password Login Exadata System, We Have To Wait For 10mins ( Doc ID 1541862.1 )
use vi editor to change it to 10 seconds
vi /etc/pam.d/sshd
auth required pam_tally2.so deny=5 onerr=fail lock_time=10 serialize
*************************************************************************
To reset ssh for a user and allow logins
pam_tally2 -r -u oracle
