[CentOS] lock out account after 3 failures

On Fri, Mar 17, 2017 at 09:41:11AM +0000, Ian Diddams wrote:
> I’m looking to configure a centos 7 server to lock out anaccount
> after 3 login failures. 

We use pam_tally2 for this, and it works well.  There is a pam_tally2
executable that you can run to look at what accounts are locked and
how many failures, as well as reset the lockout.

-- 
Jonathan Billings <billings at negate.org>