PAM: login checks, password policy and lockout
cheat sheet · Ubuntu 24.04 · Linux-PAM 1.5.3 · libpwquality 1.4.5 https://lab.dimsanych.ru/en/wiki/pam/Cheat sheet
-
grep -v '^#' /etc/pam.d/common-auth | grep .the login check stack -
sudo pam-auth-update --enable pwqualityturn on pwquality -
echo 'Lab-Pass-2026' | pwscorerate a password first -
sudoedit /etc/security/pwquality.confpassword rules -
sudo faillock --user alicealice's failed logins -
sudo faillock --user alice --resetlift the lockout -
sudo journalctl -t su | grep -i failsu refusals in the log