Comment 7 for bug 1348251

Revision history for this message
Michael Terry (mterry) wrote : Re: please make use of pam_tally2 for Touch login and screenunlock

Huh, I thought we had a different bug about this, but I can't find it now.

I just wanted to note here that we found that pam_tally2 didn't have enough reporting to be useful to us. It couldn't tell the greeter (A) how many attempts were left to go or (B) when it was causing a punitive delay (vs a PAM delay for some other reason -- though the greeter could probably guess after a few seconds).

So we went with a tally kept in AccountsService. If we later figure out how to take more advantage of pam_tally2, we can always change backends. Losing existing tallies isn't a big deal.