Protect ssh from brute forcing with pam_tally2

Registered by Bogdan Dobrelya

Use pam_tally2 in order to configure ssh login locking policy.

See http://www.tecmint.com/use-pam_tally2-to-lock-and-unlock-ssh-failed-login-attempts/ for details

Blueprint information

Status:
Complete
Approver:
Timur Nurlygayanov
Priority:
Low
Drafter:
Bogdan Dobrelya
Direction:
Approved
Assignee:
Max Mazur
Definition:
Obsolete
Series goal:
Accepted for future
Implementation:
Deferred
Milestone target:
milestone icon next
Completed by
Bogdan Dobrelya

Related branches

Sprints

Whiteboard

Feature Lead: Bogdan Dobrelya
Mandatory Design Reviewers: Vladimir Kuklin, Timur Nurlygayanov
Developers: Max Mazur, Bogdan Dobrelya
QA: Nastya Urlapova

Gerrit topic: https://review.openstack.org/#q,topic:pam,n,z

Addressed by: https://review.openstack.org/105415
    Adapt pam_tally2 for ssh for Fuel

Addressed by: https://review.openstack.org/105481
    Add pam lib

Gerrit topic: https://review.openstack.org/#q,topic:bp/ssh-pam-tally2,n,z

Addressed by: https://review.openstack.org/106705
    Blueprint: ssh-pam-tally2

(?)

Work Items

This blueprint contains Public information 
Everyone can see this information.

Subscribers

No subscribers.