Failed Login Attempts

[Trevor]

Where do I configure the max number of login attempts by a user, so that when that number is exceeded, the user account is locked?  Is there a single command I use?  Is there some file that I have to edit/modify?

[Blue_bird]

The user account faillock options should be stored in/etc/security/faillock.conf:

deny=4
unlock_time=1200
silent

Thanks

[Trevor]

Thanks Blue_bird!!

[Chetan_Tiwary_]

@Trevor If you have RHEL 7 , you can use this command :

authconfig --enablefaillock --faillockargs="deny=6 unlock_time=1200" --update

or choose to include pam_faillock in /etc/pam.d/system-auth and /etc/pam.d/password-auth  ( refer : https://access.redhat.com/solutions/7002274 ).

otherwise for RHEL 8 & 9 use as mentioned by @Blue_bird :

/etc/security/faillock.conf :

deny=4
unlock_time=1200
silent

[Trevor]

Thanks Chetan for taking me back down memory lane, with how to get things done in RHEL 7.  I've consulted with the judges, and they say, the RHEL 9.X solution it is!!!